Completed Centralized Authentication Functionality (LDAP/SSO/HTML Header/RADIUS) [DEVELOPMENT STARTED]

[Luke 24253]

It is something we would love to do, but first we need to get our offline sync and live tv features a little more mature. it is in our crosshairs though.

[Untoten 254]

revised 

Edited January 4, 2017 by Untoten

[Untoten 254]

@@Luke @@ebr

[DexDeadly 7]

I"ve agreed this needs to happen in a previous thread.  I have things like subsonic which uses LDAP and it makes life so much easier to just attach the authentication to that as it is a one stop spot for all my users.  If there is anything I can do to help test or w/e please let me know.  I can really really use this!!

[Untoten 254]

I am not sure why TV is even a priority as the lack of ability to watch encrypted channels makes its usability greatly diminished.

[drashna 45]

I am not sure why TV is even a priority as the lack of ability to watch encrypted channels makes its usability greatly diminished.

OTA broadcasts are common?

 

A lot of channels aren't encrypted:

 

Various solutions work fine with Live TV?

[Untoten 254]

OTA broadcasts are common?

 

A lot of channels aren't encrypted:

 

Various solutions work fine with Live TV?

With HomeRun cable card box and ServerWMC I get about 10 useable channels.  MTV, Comedy Central, Cartoon Network and basically any interesting channel is encrypted.

[pünktchen 570]

With HomeRun cable card box and ServerWMC I get about 10 useable channels. MTV, Comedy Central, Cartoon Network and basically any interesting channel is encrypted.

There's a world outside of USA

[drashna 45]

There's a world outside of USA

Not when you live in the USA ....

[Untoten 254]

There's a world outside of USA

Oh, sorry, I usually follow world politics, not the inner workings of cable subscriptions worldwide.

[Spaceboy 1415]

Oh, sorry, I usually follow world politics, not the inner workings of cable subscriptions worldwide.

And do you make weak assumptions about that without checking your facts too?

[Luke 24253]

There there. Let's try to go back to discussing the original topic. Thanks.

[Untoten 254]

If we got SSO working we could use Kerberos and users would autologin with their local Windows credentials .  Not to mention auto user-provisioning if we treat SSO as just passthrough and the IDP as authorization handler.

[schmitty 55]

I am not sure why TV is even a priority as the lack of ability to watch encrypted channels makes its usability greatly diminished.

This is nothing to do with emby, tuner manufacturers need to develop tuners which support cable and satellite encrypted services... ie. CA - IRdeto, MacroVision, etc.

 

 

Sent from my iPhone using Tapatalk

[Untoten 254]

This is nothing to do with emby, tuner manufacturers need to develop tuners which support cable and satellite encrypted services... ie. CA - IRdeto, MacroVision, etc.

 

 

Sent from my iPhone using Tapatalk

 

Let's keep it on topic, it was my mistake for bringing up other topics.

 

@@Luke @@ebr This FR is quickly approaching 100 endorsements by users, any timeline update? or a timeline at all?

[ebr 10333]

100...?

[Deathsquirrel 597]

Let's keep it on topic, it was my mistake for bringing up other topics.

 

@@Luke @@ebr This FR is quickly approaching 100 endorsements by users, any timeline update? or a timeline at all?

 

Just FYI the top of the thread says 33 Likes.  That's actually quite a lot for a FR.  I have zero use for this feature but clearly it's a popular idea.

[Untoten 254]

100...?

Yes @@ebr It is >80 right now and getting 1-2 more per week.  I took quite a bit of time listing all endorsements, you can see them on my first post, I listed all of them including counts for each location.

 

EDIT: It is also a year since I made this request that has been illustrated by the community is a high desire.  The biggest thing holding it back is SSL, which is really a necessity at this stage, especially with the DPI going on now.

 

Without SSL, passwords cannot be passed from client to server in plaintext, so even a hack together SSO solution is not possible without a complex pass-the-hash solution.

Edited March 29, 2017 by Untoten

[Spaceboy 1415]

100...?

Some serious double counting here. The GitHub and bounty pages are essentially identical users and posts

[Cerothen 82]

Rule #1 of dev club don't ask for deadlines on features.

 

Rule #2 of dev club submit a pull request if rule one doesn't work for you

[Untoten 254]

Some serious double counting here. The GitHub and bounty pages are essentially identical users and posts

I gathered the information available to me, it is up to the Emby team to weigh its value, but thank you for your valuable input.

 

EDIT: Many of the usernames appear to be different, so I am unsure as to the basis of your assumption.

 

 

Rule #1 of dev club don't ask for deadlines on features.

 

Rule #2 of dev club submit a pull request if rule one doesn't work for you

I am not a dev, I am a paying customer that will pay much more if this is implemented.  It is the only real request I do and have ever cared about.  I am not asking an exact deadline, just an estimate of when it may even be started.  This is a completely reasonable request.

Edited March 30, 2017 by Untoten

[Untoten 254]

@@Luke @@ebr When you finally do develop this perhaps thinking of offering it as a paid plugin as it is more of an enterprise request.  I would not be mad spending $50 for this feature as a plugin.  I know it can be a bitch, but I will pay a heavy bounty for this, plus the recurring revenue from others that purchase the plugin. 

Edited March 31, 2017 by Untoten

[Untoten 254]

Like the original post and post +1 to show support for this feature

[CrowTC 9]

I would love to integrate Emby into my home LDAP/AD authentication.

[Untoten 254]

This would make me sooooo happy