Jump to content


Photo
Completed

Centralized Authentication Functionality (LDAP/SSO/HTML Header/RADIUS) [DEVELOPMENT STARTED]

LDAP SSO SAML SAML2 Authentication security radius

  • Please log in to reply
211 replies to this topic

#21 cervy1536 OFFLINE  

cervy1536

    Newbie

  • Members
  • 1 posts
  • Local time: 12:37 AM

Posted 08 October 2016 - 11:10 PM

The possiblility of LDAP support is the reason why I would consider this over PLEX


  • Untoten likes this

#22 Untoten OFFLINE  

Untoten

    Advanced Member

  • Members
  • 425 posts
  • Local time: 02:37 AM
  • Locationhttps://emby.media/community/index.php?/topic/26495-centralized-authentication-functionality-ldapssohtml-header/

Posted 08 November 2016 - 08:45 PM

Bump



#23 fernsm OFFLINE  

fernsm

    Newbie

  • Members
  • 9 posts
  • Local time: 09:37 AM
  • LocationLondon, England

Posted 15 November 2016 - 09:24 AM

Just implementing Emby for my school (lifetime subscriber at home), it's replacing a Windows Media Services (Windows 2008R2) server which has come to the end of it's useful life. Equivalent media server solutions for education can cost several thousand pounds to buy and implement so Emby is perfect for education, especially as it's web based.

 

Most schools and universities run Windows Active Directory so AD authentication would be really appreciated, especially if you can assign permissions through groups e.g. teachers would have different permissions to students. For example teachers could record* Freeview (UK) TV programs using the HDHomeRun whilst students could not.

 

As the Emby server is free and the lifetime subscription so cheap and AD authentication is really for commercial use rather than home I would be happy if this was a paid for commercial add-on with an educational discount :-) .

 

Out of interest our Emby Server spec: HP Proliant DL380 G6 Storage Server 2x SIX CORE X5660 Xeon CPUs, 12TB SATA RAID 5, 32GB RAM, 4x 1Gb NICs. We think wit would have no problem streaming simultaneously to 70+ PCs.

 

*I'm assuming this is possible?


Edited by fernsm, 15 November 2016 - 09:48 AM.

  • drashna and Untoten like this

#24 Luke OFFLINE  

Luke

    System Architect

  • Administrators
  • 153204 posts
  • Local time: 04:37 AM

Posted 15 November 2016 - 01:10 PM

It is something we've discussed as a possibility, yes.

#25 Untoten OFFLINE  

Untoten

    Advanced Member

  • Members
  • 425 posts
  • Local time: 02:37 AM
  • Locationhttps://emby.media/community/index.php?/topic/26495-centralized-authentication-functionality-ldapssohtml-header/

Posted 01 December 2016 - 07:11 PM

@Luke @ebr Can we please get the ball rolling on this?  I requested this far over a year ago, it has some very real uses and it is clearly not a rare request. I see much potential for many things with Emby but this is a gigantic hinderance.  I have told Luke before I would donate $500-$1000 just to get this working. 



#26 Luke OFFLINE  

Luke

    System Architect

  • Administrators
  • 153204 posts
  • Local time: 04:37 AM

Posted 01 December 2016 - 09:56 PM

It is something we would love to do, but first we need to get our offline sync and live tv features a little more mature. it is in our crosshairs though.



#27 Untoten OFFLINE  

Untoten

    Advanced Member

  • Members
  • 425 posts
  • Local time: 02:37 AM
  • Locationhttps://emby.media/community/index.php?/topic/26495-centralized-authentication-functionality-ldapssohtml-header/

Posted 02 December 2016 - 01:13 PM

revised 


Edited by Untoten, 04 January 2017 - 03:12 PM.


#28 Untoten OFFLINE  

Untoten

    Advanced Member

  • Members
  • 425 posts
  • Local time: 02:37 AM
  • Locationhttps://emby.media/community/index.php?/topic/26495-centralized-authentication-functionality-ldapssohtml-header/

Posted 10 December 2016 - 04:13 AM

@Luke @ebr



#29 DexDeadly OFFLINE  

DexDeadly

    Advanced Member

  • Members
  • 33 posts
  • Local time: 04:37 AM

Posted 20 December 2016 - 01:39 PM

I"ve agreed this needs to happen in a previous thread.  I have things like subsonic which uses LDAP and it makes life so much easier to just attach the authentication to that as it is a one stop spot for all my users.  If there is anything I can do to help test or w/e please let me know.  I can really really use this!!


  • Untoten likes this

#30 Untoten OFFLINE  

Untoten

    Advanced Member

  • Members
  • 425 posts
  • Local time: 02:37 AM
  • Locationhttps://emby.media/community/index.php?/topic/26495-centralized-authentication-functionality-ldapssohtml-header/

Posted 04 January 2017 - 03:13 PM

I am not sure why TV is even a priority as the lack of ability to watch encrypted channels makes its usability greatly diminished.



#31 drashna OFFLINE  

drashna

    Advanced Member

  • Members
  • 166 posts
  • Local time: 12:37 AM

Posted 04 January 2017 - 03:54 PM

I am not sure why TV is even a priority as the lack of ability to watch encrypted channels makes its usability greatly diminished.

OTA broadcasts are common?

A lot of channels aren't encrypted:

 

Various solutions work fine with Live TV?



#32 Untoten OFFLINE  

Untoten

    Advanced Member

  • Members
  • 425 posts
  • Local time: 02:37 AM
  • Locationhttps://emby.media/community/index.php?/topic/26495-centralized-authentication-functionality-ldapssohtml-header/

Posted 18 February 2017 - 09:14 AM

OTA broadcasts are common?

A lot of channels aren't encrypted:

 

Various solutions work fine with Live TV?

With HomeRun cable card box and ServerWMC I get about 10 useable channels.  MTV, Comedy Central, Cartoon Network and basically any interesting channel is encrypted.



#33 pünktchen OFFLINE  

pünktchen

    Advanced Member

  • Members
  • 2472 posts
  • Local time: 10:37 AM

Posted 18 February 2017 - 11:05 AM

With HomeRun cable card box and ServerWMC I get about 10 useable channels. MTV, Comedy Central, Cartoon Network and basically any interesting channel is encrypted.

There's a world outside of USA
  • Spaceboy, PrincessClevage and Emby Tower like this

#34 drashna OFFLINE  

drashna

    Advanced Member

  • Members
  • 166 posts
  • Local time: 12:37 AM

Posted 18 February 2017 - 02:06 PM

There's a world outside of USA

Not when you live in the USA ....


  • Spaceboy, pünktchen and shorty1483 like this

#35 Untoten OFFLINE  

Untoten

    Advanced Member

  • Members
  • 425 posts
  • Local time: 02:37 AM
  • Locationhttps://emby.media/community/index.php?/topic/26495-centralized-authentication-functionality-ldapssohtml-header/

Posted 25 February 2017 - 09:21 AM

There's a world outside of USA

Oh, sorry, I usually follow world politics, not the inner workings of cable subscriptions worldwide.



#36 Spaceboy OFFLINE  

Spaceboy

    Advanced Member

  • Members
  • 4575 posts
  • Local time: 09:37 AM

Posted 25 February 2017 - 06:39 PM

Oh, sorry, I usually follow world politics, not the inner workings of cable subscriptions worldwide.

And do you make weak assumptions about that without checking your facts too?

#37 Luke OFFLINE  

Luke

    System Architect

  • Administrators
  • 153204 posts
  • Local time: 04:37 AM

Posted 25 February 2017 - 06:40 PM

There there. Let's try to go back to discussing the original topic. Thanks.


  • mpearon and Untoten like this

#38 Untoten OFFLINE  

Untoten

    Advanced Member

  • Members
  • 425 posts
  • Local time: 02:37 AM
  • Locationhttps://emby.media/community/index.php?/topic/26495-centralized-authentication-functionality-ldapssohtml-header/

Posted 24 March 2017 - 02:01 AM

If we got SSO working we could use Kerberos and users would autologin with their local Windows credentials :).  Not to mention auto user-provisioning if we treat SSO as just passthrough and the IDP as authorization handler.



#39 schmitty OFFLINE  

schmitty

    Advanced Member

  • Members
  • 498 posts
  • Local time: 07:37 PM
  • LocationMorwell, VIC AU

Posted 28 March 2017 - 10:33 PM

I am not sure why TV is even a priority as the lack of ability to watch encrypted channels makes its usability greatly diminished.

This is nothing to do with emby, tuner manufacturers need to develop tuners which support cable and satellite encrypted services... ie. CA - IRdeto, MacroVision, etc.


Sent from my iPhone using Tapatalk

#40 Untoten OFFLINE  

Untoten

    Advanced Member

  • Members
  • 425 posts
  • Local time: 02:37 AM
  • Locationhttps://emby.media/community/index.php?/topic/26495-centralized-authentication-functionality-ldapssohtml-header/

Posted 29 March 2017 - 12:03 PM

This is nothing to do with emby, tuner manufacturers need to develop tuners which support cable and satellite encrypted services... ie. CA - IRdeto, MacroVision, etc.


Sent from my iPhone using Tapatalk


Let's keep it on topic, it was my mistake for bringing up other topics.

@Luke @ebr This FR is quickly approaching 100 endorsements by users, any timeline update? or a timeline at all?







Also tagged with one or more of these keywords: Completed, LDAP, SSO, SAML, SAML2, Authentication, security, radius

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users