Completed Centralized Authentication Functionality (LDAP/SSO/HTML Header/RADIUS) [DEVELOPMENT STARTED]

[Luke 40078]

It is something we would love to do, but first we need to get our offline sync and live tv features a little more mature. it is in our crosshairs though.

[Untoten 303]

revised 

Edited January 4, 2017 by Untoten

[Untoten 303]

@@Luke @@ebr

[DexDeadly 7]

I"ve agreed this needs to happen in a previous thread.  I have things like subsonic which uses LDAP and it makes life so much easier to just attach the authentication to that as it is a one stop spot for all my users.  If there is anything I can do to help test or w/e please let me know.  I can really really use this!!

[Untoten 303]

I am not sure why TV is even a priority as the lack of ability to watch encrypted channels makes its usability greatly diminished.

[drashna 47]

I am not sure why TV is even a priority as the lack of ability to watch encrypted channels makes its usability greatly diminished.

OTA broadcasts are common?

 

A lot of channels aren't encrypted:

 

Various solutions work fine with Live TV?

[Untoten 303]

OTA broadcasts are common?

 

A lot of channels aren't encrypted:

 

Various solutions work fine with Live TV?

With HomeRun cable card box and ServerWMC I get about 10 useable channels.  MTV, Comedy Central, Cartoon Network and basically any interesting channel is encrypted.

[pünktchen 1350]

With HomeRun cable card box and ServerWMC I get about 10 useable channels. MTV, Comedy Central, Cartoon Network and basically any interesting channel is encrypted.

There's a world outside of USA [emoji6]

[drashna 47]

There's a world outside of USA [emoji6]

Not when you live in the USA ....

[Untoten 303]

There's a world outside of USA [emoji6]

Oh, sorry, I usually follow world politics, not the inner workings of cable subscriptions worldwide.

[Spaceboy 2565]

Oh, sorry, I usually follow world politics, not the inner workings of cable subscriptions worldwide.

And do you make weak assumptions about that without checking your facts too?

[Luke 40078]

There there. Let's try to go back to discussing the original topic. Thanks.

[Untoten 303]

If we got SSO working we could use Kerberos and users would autologin with their local Windows credentials .  Not to mention auto user-provisioning if we treat SSO as just passthrough and the IDP as authorization handler.

[schmitty 66]

I am not sure why TV is even a priority as the lack of ability to watch encrypted channels makes its usability greatly diminished.

This is nothing to do with emby, tuner manufacturers need to develop tuners which support cable and satellite encrypted services... ie. CA - IRdeto, MacroVision, etc.

 

 

Sent from my iPhone using Tapatalk

[Untoten 303]

This is nothing to do with emby, tuner manufacturers need to develop tuners which support cable and satellite encrypted services... ie. CA - IRdeto, MacroVision, etc.

 

 

Sent from my iPhone using Tapatalk

 

Let's keep it on topic, it was my mistake for bringing up other topics.

 

@@Luke @@ebr This FR is quickly approaching 100 endorsements by users, any timeline update? or a timeline at all?

[ebr 15665]

100...?

[Deathsquirrel 744]

Let's keep it on topic, it was my mistake for bringing up other topics.

 

@@Luke @@ebr This FR is quickly approaching 100 endorsements by users, any timeline update? or a timeline at all?

 

Just FYI the top of the thread says 33 Likes.  That's actually quite a lot for a FR.  I have zero use for this feature but clearly it's a popular idea.

[Untoten 303]

100...?

Yes @@ebr It is >80 right now and getting 1-2 more per week.  I took quite a bit of time listing all endorsements, you can see them on my first post, I listed all of them including counts for each location.

 

EDIT: It is also a year since I made this request that has been illustrated by the community is a high desire.  The biggest thing holding it back is SSL, which is really a necessity at this stage, especially with the DPI going on now.

 

Without SSL, passwords cannot be passed from client to server in plaintext, so even a hack together SSO solution is not possible without a complex pass-the-hash solution.

Edited March 29, 2017 by Untoten

[Spaceboy 2565]

100...?

Some serious double counting here. The GitHub and bounty pages are essentially identical users and posts

[Cerothen 95]

Rule #1 of dev club don't ask for deadlines on features.

 

Rule #2 of dev club submit a pull request if rule one doesn't work for you

[Untoten 303]

Some serious double counting here. The GitHub and bounty pages are essentially identical users and posts

I gathered the information available to me, it is up to the Emby team to weigh its value, but thank you for your valuable input.

 

EDIT: Many of the usernames appear to be different, so I am unsure as to the basis of your assumption.

 

 

Rule #1 of dev club don't ask for deadlines on features.

 

Rule #2 of dev club submit a pull request if rule one doesn't work for you

I am not a dev, I am a paying customer that will pay much more if this is implemented.  It is the only real request I do and have ever cared about.  I am not asking an exact deadline, just an estimate of when it may even be started.  This is a completely reasonable request.

Edited March 30, 2017 by Untoten

[Untoten 303]

@@Luke @@ebr When you finally do develop this perhaps thinking of offering it as a paid plugin as it is more of an enterprise request.  I would not be mad spending $50 for this feature as a plugin.  I know it can be a bitch, but I will pay a heavy bounty for this, plus the recurring revenue from others that purchase the plugin. 

Edited March 31, 2017 by Untoten

[Untoten 303]

Like the original post and post +1 to show support for this feature

[CrowTC 22]

I would love to integrate Emby into my home LDAP/AD authentication.

[Untoten 303]

This would make me sooooo happy