Jump to content

MB3 Server Authentication from Web


thousandbuckle

Recommended Posts

thousandbuckle

I did that but when I hit the http address it still takes me right in to the dashboard without asking for a profile or username. 

 

I have two profiles one for me which the administrator and one for the kids. When I go to the http address it automatically connects to my admin profile but does not ask for any credentials. I put a passord in the User Profiles - Users - Passwords field. Is that the correct place?

Link to comment
Share on other sites

yes. if you use the system tray to launch the dashboard it will auto-login the admin. on any other device, the password will be remembered, so you'll have to make sure to log out if that's not what you want.

Link to comment
Share on other sites

thousandbuckle

okay I think I figured out what the problem was. I had book marked the page after I had logged in. I sent that book mark to a friend and they were able to access the dashboard without any authentication using that bookmark.

 

Does that make sense? Is that the way this is designed to work? I would have assumed that regardless of the bookmark it would ask to authenticate each time before accessing the dashboard.

Link to comment
Share on other sites

it does force them to login, however if you used the auto-login from the tray, the url might have had a user id in it.

Link to comment
Share on other sites

thousandbuckle

Not sure if I ever did an auto-login from the system tray because I run MB3 server as a Windows service. Is there any way to make MB3 server forget the auto-login if I chose that during the initial setup?

Link to comment
Share on other sites

thousandbuckle

Hello All,

 

I am trying to figure out how to secure my MB3 server interface from the internet side. I have port forwarded 8096 and can access the interface from the web but there is no authentication for it. If I go to http://xx.xx.xx.xx:8096/mediabrowser/dashboard/dashboard.html the dashboard is accessible and does not prompt for any kind of authentication.

 

I would like to secure it somehow. Any one know how to do this?

Edited by btotel
Link to comment
Share on other sites

thousandbuckle

I have set a password on the admin user profile and yes if I log out and go to the main login page it asks me for credentials again. BUT......if I bookmark a page when I am logged in as the admin and logout and select the bookmarked link when I was logged in it will log me back in with out any authentication. Is that normal?

 

My experience has been any bookmark that was generated while logged in will still require some kind of authentication to get back in when using the bookmarked link.

 

This is an example of the bookmarked link that if I use it or send to a friend they can get direct access to my media server without any authentication.

http://xx.xx.xx.xx:8096/mediabrowser/dashboard/dashboard.html?u=3t93a2064462d9db101cca8d7025d25e

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...