Jump to content

Brilliant move: Locked out my admin account. Designflaw!


Go to solution Solved by Neminem,

Recommended Posts

Posted

Happy to help.

Glad you got it running.

I guess the help text could have more of a warning label to it.

image.png.c54af18f0b6e497a94a24daeb8bd80d4.png

But messing with this can get you in trouble when introducing "Typo's" to it 😁

But good you got it fixed.

  • Thanks 1
helgen77@gmail.com
Posted

Apologize for my angry rant here.... But we help emby devs.. The closing of access to admin accounts outside LAN is a very important security setting. So, heres how i suggest emby team solve it:

- MANDADORY email tied to the admin account. You cant register one without email, that way you dont forget to have your admin account tied to your email.
- You can reset the password using your email. You should also be able to reset this security setting as easy as you reset the password using email.

Pro tip: For extra security you might also want to make the admin account tied to a specific computer so you need a code to your email to even use the admin account on a different machine.

  • Disagree 1
Posted (edited)
14 minutes ago, helgen77@gmail.com said:

- MANDADORY email tied to the admin account. You cant register one without email, that way you dont forget to have your admin account tied to your email.

I disagree with this.

1) I do not want to have to relay on external factors.

2) I use Emby for its privacy, and do not want a email connected to my admin.

14 minutes ago, helgen77@gmail.com said:

- You can reset the password using your email. You should also be able to reset this security setting as easy as you reset the password using email.

That might be for none admin users.

But not for a admin account, its my system and the password file / request is placed in my local system, for me to read.

Not some hacker having access to my mail, and found the url to my Emby server, trying to gain access.

14 minutes ago, helgen77@gmail.com said:

For extra security you might also want to make the admin account tied to a specific computer

NO NO NO, I have 4 Emby server's right now, running a cross multiple physical servers.

1) Stabil for my wife and kids / Friends.

2) Stabil for plugin testing.

3) Beta for Testing.

4) Beta for plugin testing.

All of these are running a weekly sync, using the Backup and restore plugin.

Just so I look at equal data, when doing test's.

Edited by Neminem
helgen77@gmail.com
Posted
15 minutes ago, Neminem said:

@helgen77@gmail.comThese might be a great feature request, but with the option to turn of 😉

or have:
192.168.0.0/16,10.0.0.0/8,172.16.0.0/12 <- these by default in network settings ... it should cover 99,99% of users

  • Disagree 3
Posted

Well tbh its you network, and you should know it's subnets.

And set it up accordantly.

Emby should not interfere with that.

That would just make other users with other subnets fail, with out reason.

Your issue was misconfiguration, that you introduced by mistyping.

That's on you, NOT Emby.

  • Agree 2
Posted
On 2/19/2026 at 12:11 PM, helgen77@gmail.com said:

Ok ... i managed to fix it thanks to you, the emby developers should give you a free lifetime emby pass for this. ARE YOU LISTENING, EMBY TEAM?

You pointed me to system.xml, i had typed the wrong subnet..... 192.168.0.0/24 instead of 192.168.1.0/24..... editing it fixed it, i can now log in as admin.

But it shouldnt be this technical to fix a mistake thats fairly easy to do, i hope emby team looks at this.

As it pertains to accidentally typing the wrong subnet, what safeguard do you suggest?

crusher11
Posted
On 2/20/2026 at 1:34 AM, Neminem said:

2) I use Emby for its privacy, and do not want a email connected to my admin.

 

Something tells me @helgen77@gmail.comis not concerned about the privacy of their email address.

helgen77@gmail.com
Posted
15 minutes ago, crusher11 said:

Something tells me @helgen77@gmail.comis not concerned about the privacy of their email address.

well thats what was automatically assigned when i signed up... I dont see any way to change nickname here.

helgen77@gmail.com
Posted
2 hours ago, Luke said:

As it pertains to accidentally typing the wrong subnet, what safeguard do you suggest?

I guess some way to reset settings that lock you out, for example over email which i believe is the easiest.

But the other guy here is right ,that i was assinged my email adress as nickname when i registered is annoying, if mods here could change my nickname to John Doe or something and remove the email from this thread id apriciate it. I dont see anywhere in settings to change that.

Neminem
Posted

You can change it here.

image.png.afc966a9a5a245b0730fa0056ef82b9f.png

image.thumb.png.ddeed7a4bc3aff5692bb418d2aaedca9.png

helgen77@gmail.com
Posted
6 minutes ago, Neminem said:

You can change it here.

image.png.afc966a9a5a245b0730fa0056ef82b9f.png

image.thumb.png.ddeed7a4bc3aff5692bb418d2aaedca9.png

There is no "change" option beside my display name

Screenshot 2026-02-22 at 11-31-39 Settings - Emby Community.png

Neminem
Posted

Hmm that's strange, It might something about forum rating.

@AbobaderCan you explain this?

helgen77@gmail.com
Posted
1 hour ago, Neminem said:

Hmm that's strange, It might something about forum rating.

@AbobaderCan you explain this?

I have no negative forum rating, says im a rookie, thats it. I also think its strange to put my email out in public when i register because i didnt do that, and then not have the option of changing it and chose a nickname

GrimReaper
Posted
2 hours ago, helgen77@gmail.com said:

if mods here could change my nickname to John Doe or something and remove the email from this thread id apriciate it

An admin needs to do that. @Abobader

2 hours ago, Neminem said:

You can change it here.

image.png.afc966a9a5a245b0730fa0056ef82b9f.png

image.thumb.png.ddeed7a4bc3aff5692bb418d2aaedca9.png

 

2 hours ago, helgen77@gmail.com said:

There is no "change" option beside my display name

Screenshot 2026-02-22 at 11-31-39 Settings - Emby Community.png

 

2 hours ago, Neminem said:

Hmm that's strange, It might something about forum rating.

@AbobaderCan you explain this?

 

15 minutes ago, helgen77@gmail.com said:

I have no negative forum rating, says im a rookie, thats it. I also think its strange to put my email out in public when i register because i didnt do that, and then not have the option of changing it and chose a nickname

Rookie member group cannot change Display name.

Quote

1 - Rookie: 0 to 50 posts

Search flood control: 20 seconds

Display Name Changes: Need to PM me or any other admins to change it for you.

Bypass flood control? No (members need to wait 3 minutes before posting again).

Can edit own content?: Yes.
Edit time restriction: 15 minutes after posting.

Can hide (delete) own content?: No.
Need to PM an Admin or a Moderator.

 

helgen77@gmail.com
Posted
7 minutes ago, GrimReaper said:

An admin needs to do that. @Abobader

 

 

 

Rookie member group cannot change Display name.

 

Using email as default nick isnt the smartest ive seen either though .... should be roockie1053262 or something.
 

Neminem
Posted

Guess you did not read the signup form 🤷‍♂️

image.png.4f20aa0718a2857942100861b703c0ca.png

helgen77@gmail.com
Posted
7 minutes ago, Neminem said:

Guess you did not read the signup form 🤷‍♂️

image.png.4f20aa0718a2857942100861b703c0ca.png

so it automatically puts in the email...

well heres another reason why it would be smart to change things a little bit. 

Im like a living beta-tester.... if it can go wrong, it will go wrong, and i wont be the first one doing these stunts.

crusher11
Posted

Nobody else seems to have had a problem reading the sign-up form.

helgen77@gmail.com
Posted
Just now, crusher11 said:

Nobody else seems to have had a problem reading the sign-up form.

Really?

Im the first?

I doubt that.

It says "required" and then automatically fills in your email if you dont put something there and press submit.

Strange.

Neminem
Posted

TBH I'm done with this, good luck to you.

helgen77@gmail.com
Posted
1 minute ago, Neminem said:

TBH I'm done with this, good luck to you.

Thanks and good luck to you.

Im still 25 posts away from being able to edit out my email after being "the elephant in the glasshouse".

helgen77@gmail.com
Posted

Should you build a house out of glass though? Is that smart?

  • Facepalm 1
Posted
1 hour ago, helgen77@gmail.com said:

so it automatically puts in the email...

The display name field is first.  If that got autofilled with your email, it wasn't the forum that did that.  It was your browser.

helgen77@gmail.com
Posted

maybe this was ment to happen to underline my point: If you engineer a system where 1 mistake locks you into a cycle of pointless posting or need of assistance, youre making yourself morally responsible for assisting customers that make these mistakes. When youre in the military, you dont give out fragile guns that can break if someone, you make sure that gun works no matter what mistake or abuse the user does to it. I think the same design philosphy should be the goal even if its software for a home server or a message board. First time ive heard of a message board that automatically puts in your email if you forget to type a nickname.

  • Facepalm 1

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...