Leaderboard

Those online solutions, enterprise solutions, are multi-tiered and multi-layered implementations of security, identity, access and directory products/services integrated to present you with a simple button or prompt for login and/or MFA. The Emby dev team may decide in the future to add the option to integrate with such external products but they should not spend time developing one for this media server. Their time and effort are better spent on improving the core function of Emby.

Skimming through the thread again, I can kinda understand the Emby teams apprehension adding something like this. And they have explained it a few times already. I think it's primarily the fact that a lot of people can barely get their environment set up and Emby installed and working successfully without help, no less trying build in too many fallible, external security layers... so they have to weigh the cost of implementing, the many man hours of supporting people who will inevitably run into issues with it through no fault of the software, and the benefit. Emby, to me, has always seemed like it's very much so in the non-centralized, DIY mindset as far as security goes. As it should be IMO. You open up or lock down your server as much as you deem fit. You can keep it entirely localized if you want. If you don't want to deal with an HTTPS connection or firewall rules, you can expose Emby insecurely to the entire world if you want to. If you want to run it securely through a reverse proxy or with an SSL cert and only want to expose it to the IP addresses of a few close family members, you can do that. Emby can be secure using the tools already available and a little due diligence at the server level. 2FA is just another option but everyone seems to have a different perspective on how much that makes or breaks Emby as far as security goes, and the Emby team has more to weigh as far as the actual workload. Should note that the recent breach in Emby was mostly the result of people who didn't even have a password on their admin user. A 2FA option wouldn't have helped them.

You've had since may last year to provide feedback on this change. It was made quite clear at the time, that this change was coming; both in the public and beta channel discussions, particularly around the time every effected emby server shut itself down alerting the operator and directing them here for further info. Maybe you should have engaged in those discussions... Changing the authentication requirements based on your apparent location (local vs wan) is a horrible practice that creates vulnerabilities that many won't even know to look for/avoid. Unfortunately in situations like that; you've gotta cater to the lowest common denominator. Want no passwords at all? Remove the passwords and make the server inaccessible from WAN. Or leave it exposed and accept the risks. Most of the clients are already updated to the new standards; the few that aren't are in review by their app distributors (some smart TVs for example). Have a little patience. Or side-load the latest version.

This is the problem! How do you know this is better for everyone? How about giving people a choice rather than you deciding what works best for everyone? Plex started making decision like this for its users which is why I switched to emby. Is it time to switch again?

Hey guys, I'm not sure if this helps or not but in the USER settings under "Manage Server > Users > UserAccount > Access" I checked the .../playlists dir (first one) and the old playlists showed up. After that I was able to take a playlist, right-click > Add to Playlist > New Playlist which transferred its contents into a new modern playlist with all the bells & whistles of private/collaboration. Oh yeah, and to delete I found that by checking the Playlists option under "Manage Server > Users > UserAccount > Profile" and scrolling to the "Allow Media Deletion From" section with all the library folders. I hope this helps any.

Did you notice i'm the developer of the plugin? So yes.

I have 'Remember me:Yes' and it is asking me for a password everytime I switch between users on the aTV client 1.8.3(1). I really don't want to use passwords to switch between users when I'm connecting across my local area network

You actually weren't, if you hide sidebar Search icon will show where you were expecting it (and where it used to show), top-right next to user icon.

Hi, there has never been a search tab. Did you try using the sidebar on the left? It has search right in there.

Ah, I had missed that one. Definitely glad it's an option though, I'm not a fan of displaying all users to other users.

@seanbuffThat did the trick. I hadn't messed with the new playlist options until I tested this out. For anyone else wondering, the setting is configurable per user, but as already stated, any user that has this enabled will be able to see a list of all users on the server. @LukeAre there any plans to add more granular controls to whom each user can share a playlist with? Playlist sharing is a very desirable option, however I would definitely like to see more granularity in the controls as there are downsides to giving out a full list of all users on the server, especially considering it exposes names of admin accounts.

You're back. Yay !

Are you all enabling the additional User Profile config option? This allows the 'Collaboration' page to be populated with your server users. Be aware that this list will expose all users to each other.

Wouldn't it be easier to just add the TMDBID to the folder name rather than each file within that folder? I believe the documentation was also referring to that convention for folders, rather than the files.

How is that "totally local"? How would the authentication actually occur?

Well, it does a bit in that, in order to implement 2FA there needs to be some sort of authentication point and, having one central one for everyone makes this MUCH easier. The complication with us is that the authentication lies entirely within your own server on your network. Just look at the number of people who struggle setting up external access to their machines and extrapolate that out to trying to properly setup their network so that 2FA communications can properly work. Not impossible but certainly more complex and much, much harder to support.

The next updates to most Emby apps should do this, outside of Roku.

@MBSkithank you. Went to Live TV/ advanced and set the series and movies recording destinations(even though it says optional) to my library path and now everything works as it should.

Security is an important function and the dev team has spent this beta cycle hardening and closing the gaps in the system. I don't agree with all of the choices they made but I'll live. Your list is of products intended to be openly hosted for public access and even if restricted they are by design meant to used anywhere and everywhere. Emby is by design a personal media server with the option to add public access. I'm not saying they shouldn't include an option for MFA but it's not a priority for most.

While I agree that choice is a good thing, and features should keep user choice in mind, there are tradeoffs between convenience and security. As someone who has been self hosting services on my home server since the late 2000's, I can tell you there aren't many applications that don't require some kind of authentication to access them. Most self hosted applications require authentication because of the assumption that it may be exposed publicly. Requiring a username and password is the bare minimum in terms of securing an application properly. Now I'd be upset if they implemented 2fa as a requirement, but it would be nice to have the option.

How many of my systems do I allow direct remote admin access ? Zero - absolutely zero. If you are serious about security - the only way you should be allowing admin access to internal systems is with tunnels, vpns, etc and reverse proxies - all giving you the option of MFA (which you should take) but the 'tunnel' has nothing to do with emby. Emby has done a lot of good work on security since the security incident last year - they are correctly building the layers such as notification, brute force detection etc - which all need to be in place before the more advanced stuff such as MFA. I did a thread on it actually Q4 last year (actually it was a PM to Emby Admin) - MFA was on the list, so I'm certainly not against it, it just needs to be given a realistic use case with emby.

Why does it take so long to update the official Emby repository?! Should I switch to Linuxserver?

I dont want to be forced to PIN my accounts even if they are remembers - and specifically neither does my wife or children. If the network configuration has the ability to identify if I am local or not why can we not continue to utilise a feature that has existed for a long time I completely understand if you wish it to not be the default but if the user is willing to accept the associated risk for the convenience I really hope this is something we can bring back. This is actually something that should it been clearer in the upgrade logs i may have just stayed on 4.7. Upgrade logs were very vague on disappearing features. his is extremely disappointing and i would normally test on a docker or similar first but given how long this has been in beta i skipped that part. I already secure all my accounts with a strong password for when I decide to allow remote connectvity (this is not always active and i login manually) - Only i knew this password because locally "Allow logins from local network" allowed the login thorugh Now the only way to allow my wife and children to login easily is to remove all passwords from the account So can i ask a further question: If it is more secure to require a Password/PIN over the ability to "Login locally without password" - Why do i have the ability to have an account that simply has no password Surely a passwordless account is even less secure than what we had before? I will add a disclaimer here that i do agree this is more secure, but I also believe that as the end users we should be empowered to make the decision on the security risk and not have it made for us. Essentially now instead of having my accounts secured by a password, I have had to remove the passwords completely Can we please bring back the local network login? Disclaimer it that this is not recommended etc etc if you need to but this really is a approval factor for EMBY. Last I checked even Plex does not force this on its users and I really hope EMBY team listens to this feedback

I hope it's helpful: Creating a custom DLNA profile

Who ever is managing the Unraid container needs to update the "More Info" tab when you click the container in Unraid. Right now it's linked to "https://registry.hub.docker.com/r/emby/embyserver/" and that link is broken.

Hi, Fyi Linuxserver has the updated version but not the official Emby repository I use the official one Thank you, Bryan @Luke

There is a new nuget package corresponding to the stable release. I'm pretty sure that in your case you will need to update to it.

Hi Emby Developers, I've a problem with my Emby LG App 1.0.39 since updating to Windows Emby Server 4.8.0.80 Since the Update the "Continue Watching" section is not showing up anymore under the following settings TV mode home screen: Horizontal Library Type: Series (only) -> Movie Libs are working correctly Restoring Emby Server Version 4.7.14.0 OR using TV mode home screen:Vertical the "Continue Watching" section is showing up again. Can you please fix this, because this is a very important and often used feature when watching series

To rename the episodes themselves we use S01E02 instead. T01E02. S = Season T= Temporada | E = Episode in portuguese = "Episódio" so no problem. We use the character "ª" in the sense that if "1 temporada" were added, it would sound like "One Season" in English. Adding the "ª" In addition to being grammatically correct in my language, in English it would be like "First Season" "Second Season (2ª)" and so on

ok thanks for the clarification. I hope everything returns to normal soon. I did the test, took a newly added folder and renamed the folder to "season1" and it fixed it. But just thinking about having to modify more than 267 folders gives me a headache LOL

I went to sleep for a while but woke up. I responded as I read. But I'm here to thank you for your answers. I hope you get this fix soon, thanks for your attention.

Hi, authenticating in different ways based on network location has turned out to not be a great security practice. We have replaced it with something that we think will be even better, which is a new profile pin system so that you can quickly change users without having to enter a full password. Have you tried that? You will have to login once, but then after that you can use the profile pin to come back.

Sending to the server would be a great idea I've not tried to email it but I'll see if I can install Gmail on my tv and get it to work that way

Just updated and now mine is stuck at "Emby Server is loading. Please try again shortly." and I am not sure if I should wait or try and stop and start it again. Edit: it did come back on its own! Took about 5 minutes.

yeah no worries like i say its just something to think about for future hopefully something that could possible with out to much of a headache lol

No chance - given that 4.8 is already released :~) But if it doesn't appear quite early in the 4.9 beta round, some people will be seriously pissed off... Paul

Hi, just a quick follow up. I never did bother with resolving this as it seemed to be unique to my server and could be tolerated. I had plans to delete and rebuild the library to fix it, but losing watch history for everything didnt seem worth the effort. Any episode added to my library after the 4.7 update would show in next up correctly, anything from before did not, regardless of its watched state. This also resulted in a quirk where if any show had seasons from before and after the update, watching an episode from before the update would populate next up with the first episode from after the update, regardless of how many unwatched seasons were between them. 4.8 has resolved it, whatever the hell it was. Thanks.

It has happend to me a few times that I've accidentally touched the "Played" button in a playlist or the overview of a show, involuntarily mass-marking a lot of episodes as watched or unwatched. And it is always a hustle to undo this - especially if I don't know exactly what the last episode I've watched was. So I would really welcome either an "Undo"-Function to restore the state before the accidential touch or at least a confirmation dialogue before changing the watched-state of multiple episodes.

Still black sceen...

My Server just came back!!! thanks!!!

hi, another way to do so would be to install a plugin like pushbullet I use it to check who is watching a movie/show on my server to check how much users are watching. So just install pushbullet or something else, register an account for free, and create your own channel. after this you can configure notifications for new added media and everyone in this channel will get the notifications

Think you copied the whole thing over by clicking on one of the icons in the top left, maybe second or third from left ? My preference is to click on the actual image of the Drive (the biggest image by itself in the middle). That'll make it analyse the disc and give you a list of files to rip, like - Generally I don't care about extras, so just pick the biggest one. Unfortunately sometimes there can be several biggest ones and you have to pick or copy them all and choose from there. Sometimes the java will label the movie as main feature. Sometimes you get a version with chapters and one without, you want with (it''ll give chapters in the items info if you select an individual item in the list). Sometimes you get versions of the same - Star Wars for expample will have versions apparently the same, the only difference being that crawl they have at the beginning of the movie is in a different language. Slightly different duration or file size are different cuts. There's an option somewhere to only save the language you want (File > Preferences I think). Also you can expand the item selected to see and /.or select tracks / subtitles / whatever.

Hi. Carlo has had to step away for a while due to some health issues. We hope he is back with us soon.

New PUBLIC TESTING version available 9.4.4: Delta changelog 9.4.3 -> 9.4.4 fix multiversion fix player issues fix upgrade issue from 8.X version KNOWN BUG: If you install from absolute scratch, you need to perform a factory reset before you start init sync. Fill be fixed in next version. Update from any previous version is working.

Hey All, I see the new version is release so I can finally work on the fix... (I battled to get my hands on the changed libraries before hand). I will set some time aside this weekend to resolve. Once the new version is compatible, I will look at feature/bug requests. Priority is getting this on the new version. (I wanna upgrade toooooo). Awesome Sauce.

There seems to be something very wrong with coverart plugin and 4.8, it does not look right or good at all. They look clipped on the right side and the whole jewel case looks off.

I look foward to have the same thing too I'd like to catalog all games I own on Emby too, just matching "Folder name" or "Compressed name ISO\ZIP" maybe would be a nice start. Just some basic infos like Cover, Story etc we can grab from online catalogue and showing size of Folder\Files etc. and data maybe. Maybe a bit OT but seem a nice adding to the Gamebrowser topic Chooo

@yaksplat, @LukeOkay, so I did a deep dive into the balenaOS + balenaCloud + balenaSound ecosystem and implemented this with two Raspberry Pi 4 based audio nodes. It is basically a nicely implemented turn-key managed cloud implementation of Snapcast [https://github.com/badaix/snapcast] with plugin services to accept streaming input from Bluetooth, Airplay and Spotify. It's pretty decent. And the synchronized audio is very well sync'ed; but as noted that's a function of Snapcast, not the balena org. But one has to be willing to go hard into the balena ecosystem. It's free up to 10 devices per account (for who knows how long that may be). Then seriously expensive after that; definitely intended for large income producing managed cloud device implementations [balena calls that a Fleet] to warrant that cost. Where balenaSound is a nice little 'side' project they created to both bring exposure of balena to the likes of us, and give something back to the open source community for free (as noted up to a point; tho 10 devices is a pretty decent give for free.). Given that Snapcast can take its audio input from PulseAudio or ALSA loopback [https://github.com/badaix/snapcast/blob/develop/doc/player_setup.md], I imagine it would be entirely possible to ssh in and install Snapcast client + server to an Emby Theater device installation and reconfigure the PulseAudio (or ALSA?) sub-system to recast the music playback output of that Emby Theater devices to a) itself and b) other devices, all running Snapcast client, to have synchronized multi-room audio sourced from an Emby Theater device. I wish I knew more about PulseAudio and Snapcast. I'd give that a try. OTOH, the URLs I linked-to above do give pretty good direction. Maybe if I have time one day.

That should have worked.Try going into your browser and clear all info for your site. Make sure to reset cache, stored password and cookies. Then try it again. If that still doesn't work try these things next. 1. same username but leave the password field blank. Make sure to login from a LAN computer or the server itself. 2. Click the Forgot Password link shown in the screenshot above after filling in admin for the username. Does this give you a location to a file? If you open the referenced file it should have instructions and a URL to use to set a new password. 3. shutdown Emby Server. We're going to edit a file that is in the config folder. The config directory is at the same level as the data directory you grabbed the user.db from. With a text editor (notepad on windows is fine) open the file named system.xml. Set this value to true. Save the file and restart Emby Server. This should rerun the setup wizard giving you a chance to change the password. Alternately create a new username and password that will be an admin on the system. You can then login with that username and use it to fix your first account. You can leave the second account if you wish but I'd set account up so it never shows on logins screens.