Brilliant move: Locked out my admin account. Designflaw!

[helgen77@gmail.com 1]

You need a quick update for this because i bet im not the only one that did this stupid move:

First i have been testing emby on a monthy premiere subscription, i had 1 admin account set up, no email on it. I managed to disable allow remote access on this, even though i had set LAN ip the admin account locked itself out so now i cant log in.

The reason i did that was i followed guides from chatgpt where i was trying to disable remote access to admin account outside of the specified LAN ip as a security measure so i can only get admin rights trough my local computer and that theres no way to gain that trough the internet, but it obiously didnt work like i thought it would, and i wasnt smart enough to safeguard with 2 admin accounts first before doing that (i thought about it just as i changed the setting and had pressed "save" ... "ups maybe i did that too quickly").. Idealy only user accounts without internet access should be able to get admin rights in emby for security reasons, this was what i was trying to do.

But this shouldnt happen. Acording to chatgpt there used to be a way to fix this by editing users.db but thats no longer the case alledgelly, so i guess im stuck here now with no way of logging in with admin. This is a flaw of emby design. 

So now im in the process of backing up emby and i guess i need to reinstall the whole thing and home i can restore metadata etc. if theres a quick fix to this please tell me now, if not i request that emby developers do somthing about this so it doesnt happen again with more paid users because

[helgen77@gmail.com 1]

"because.." and i need to wait 136 seconds to edit that out at the end. Another not too bright flaw on this message board.

BTW i use VPN .. everyone that cares about security do, like the feature i just requested

[helgen77@gmail.com 1]

So i tried to uninstall emby and reinstall... it didnt remove the users so i got a new setup which is the only way i can think of to get back access to my admin account

[helgen77@gmail.com 1]

its installed on a synology nas btw, trough package center

[helgen77@gmail.com 1]

Tried deleting users.db aswell to reset it... doesnt work.... im completely locked out now, cant log into emby at all, and no way to get around it.

I dont see how you can get around making a fix to this problem and release an update 

[helgen77@gmail.com 1]

Only quickfix i currently see is that someone helps me with a new users.db file with 1 admin account only and a simple password so i owerwrite the old users.db and can log in as user: admin password: admin and change password/username and set up new users. 

[helgen77@gmail.com 1]

Thank you so much for this outstandingly helpful forum.

I canceled my subscription, guess its back to jellyfin.

[Neminem 1515]

Nice 1.

you first posted 1 hour ago.

and continued your rant for 7 posts after.

Further more you asked a stupid AI bot for help and that messed you up.

Have fun with going forward

[helgen77@gmail.com 1]

Just now, Neminem said:

Nice 1.

you first posted 1 hour ago.

and continued your rant for 7 posts after.

Further more you asked a stupid AI bot for help and that messed you up.

Have fun with going forward

the ai bot didnt mess this up, this got messed up either way since i wanted to lock out internet access to admin account and if you do that and dont have a backup admin account, you just locked yourself out of emby and no way to fix it on synology.

BRILLANT MOVE, EMBY CREATORS! APPLAUSE!

Glad i only took 1 month and decided to TRY IT OUT before i went full in on emby.

[Neminem 1515]

I have no issues with this setting on my admin account.

What did you do ?

to end up where you are.

[helgen77@gmail.com 1]

Just so its clear here: all chatgpt did was offer some solutions that didnt work, like deleting users.db etc ... so you cant blame that, and you cant blame me for being stupid either because in emby setup, its clear:

- BLOCKING EXTERNAL ACCESS MEANS INTERNET!
- IN YOUR USER ACCOUNT, YOU CAN BLOCK EXTERNAL ACCESS <- WHICH ONE WOULD ASUME MEANS: INTERNET!

BUT.... NOPE! That wasnt me being a moron, that was stupid design of emby.

And the amazing helpful community here with your nice comments, you guys just makes me want to keep throwing dollars at you!

You will get the lousy 5 dollars that only gave me trouble, but no more!

[helgen77@gmail.com 1]

5 minutes ago, Neminem said:

I have no issues with this setting on my admin account.

What did you do ?

to end up where you are.

Right... enabling that SHOULD mean you block access to internet... NOT LAN ASWELL In the other setting i specified LAN adress, currently not open to external connections over internet (until properly set up). But enabling that you not only block internet access to admin account, you block all access to the admin account including from LAN 

[Neminem 1515]

1. I'm just another user trying to help you. And not working for Emby.

2. Nice of you to YELL at me.

3. Can you came down and let look at what happened? 

[Neminem 1515]

1 minute ago, helgen77@gmail.com said:

But enabling that you not only block internet access to admin account, you block all access to the admin account including from LAN

What did you type in there?

I have this.

10.253.0.0/24, 192.168.1.0/24, 172.17.0.0/24

--------VPN------- ---------LAN---------- -----Docker------  Network

Lan IP address of my server is 192.168.1.4 and that fall's under 192.168.1.0/24

The clients that I use all are connected to 192.168.1.0/24 and have access.

How is you network designed?

[helgen77@gmail.com 1]

2 minutes ago, Neminem said:

What did you type in there?

I have this.

10.253.0.0/24, 192.168.1.0/24, 172.17.0.0/24

--------VPN------- ---------LAN---------- -----Docker------  Network

Lan IP address of my server is 192.168.1.4 and that fall's under 192.168.1.0/24

The clients that I use all are connected to 192.168.1.0/24 and have access.

How is you network designed?

right... 192.168.1.0/24 <- same adress... specified in the settings. This is on the same LAN, this ip is in that range so it should work, i get frustrated since i sat yesterday setting up metadata etc and then this happened

[Neminem 1515]

1 hour ago, helgen77@gmail.com said:

its installed on a synology nas btw, trough package center

Not sure where to finde your user profiles on a Synology NAS.

Since I run in docker on unRaid.

But if you can finde you /config/users/and your admin user/policy.xml

Then try setting this setting to true.

Mine is false, no remote access.

<EnableRemoteAccess>false</EnableRemoteAccess>

[Neminem 1515]

One more question.

Did Emby report the right IP adresses for both home and remote on the dashboard?

When you did the changes.

[Neminem 1515]

Also what version of Emby Server did you install?

Are there any logs in the in the logs dir?

That would also be good for troubleshooting.

Well guess Devs would need a lot more questions answered. 

 

[helgen77@gmail.com 1]

4 minutes ago, Neminem said:

One more question.

Did Emby report the right IP adresses for both home and remote on the dashboard?

When you did the changes.

yes .... both was correct. I also tried walking straight to the modem where the NAS is and connect there trough wifi and login there, same problem, i am on the net specified in settings. Is this a bug then? Whatever it is i dont see any solution.

[Neminem 1515]

16 minutes ago, Neminem said:

Not sure where to finde your user profiles on a Synology NAS.

Since I run in docker on unRaid.

But if you can finde you /config/users/and your admin user/policy.xml

Then try setting this setting to true.

Mine is false, no remote access.

<EnableRemoteAccess>false</EnableRemoteAccess>

This might work.

[ebr 16168]

1 hour ago, helgen77@gmail.com said:

Tried deleting users.db

Hi.  You saved this somewhere, right?  If not, you are going to have to start over anyway.

[helgen77@gmail.com 1]

7 minutes ago, ebr said:

Hi.  You saved this somewhere, right?  If not, you are going to have to start over anyway.

yes i saved it

[helgen77@gmail.com 1]

43 minutes ago, Neminem said:

This might work.

Nope, i think i found that file (system.xml) and amazingly, enableremoteaccess is set to TRUE

[Neminem 1515]

Hmm sorry, that was 1 thing to look at.

2 hours ago, helgen77@gmail.com said:

BTW i use VPN .. everyone that cares about security do, like the feature i just requested

Are you still connected to VPN on the pc trying to connect to your local server?

Or is that enabled in your router?

Edited 2 hours ago by Neminem

[helgen77@gmail.com 1]

4 minutes ago, Neminem said:

Hmm sorry, that was 1 thing to look at.

Are you still connected to VPN on the pc trying to connect to your local server?

Or is that enabled in your router?

Ok ... i managed to fix it thanks to you, the emby developers should give you a free lifetime emby pass for this. ARE YOU LISTENING, EMBY TEAM?

You pointed me to system.xml, i had typed the wrong subnet..... 192.168.0.0/24 instead of 192.168.1.0/24..... editing it fixed it, i can now log in as admin.

But it shouldnt be this technical to fix a mistake thats fairly easy to do, i hope emby team looks at this.