Authentication for Internet connections soon?

[Tranquil 94]

Hello Forum and Devs!

 

Is there a way to turn on authentication for clients which use internet connectivity? (Android App for eg)

 

I don't want to forward and open the MediaBrowser Server ports on my router as everyone can gain access to it atm.

As for now, I access it via VPN but I think for most users this is not a common solution.

 

 

Cheers and greetings from Germany

 

Mike

[Beardyname 198]

Not exactley sure how you mean but, would setting a password for that user work? Since that is already implemented you can also hide users from the login page so the names have to be entered manually! Hope this answers your question!

[Tranquil 94]

Ups? It is possible to set a PW for a User? I will give it a try if I'm back at home!

 

Thanks for yoru reply.

[fraenhawk 61]

Hmm, but say I have two accounts - Adults and Kids - and want to keep it easy to switch between on my various HTPCs, I don't want passwords. Is there a way to not expose certain users to the non MBClassic/Theater clients?

 

Or, if I do go the password route, in the classic configurator when you pick a user to auto start as, is it going to prompt for a password every time or can I save it on the HTPC?

 

Only been running server since 4:30 yesterday after a long time of using MB2. Loving it so far 

[Beardyname 198]

As of now (might change) i don't think there is a possibility to just allow certain accounts to connect from just lets say MBT. But for you (i think) the easiset way would be to do hide all the users from the web/mobile clients (that's what im using) check here : http://i.imgur.com/F4dZKkN.png

It would still be possible to guess the usernames but it certainly minimises the risk.

 

Hopefully what i just wrote is understandable ^^

Edited January 3, 2014 by plumblum

[Koleckai Silvestri 1154]

If you don't want passwords on your profile accounts then, you'll need to set up a VPN on your network and require authentication through that.

Edited January 3, 2014 by Wayne Luke

[fraenhawk 61]

As of now (might change) i don't think there is a possibility to just allow certain accounts to connect from just lets say MBT. But for you (i think) the easiset way would be to do hide all the users from the web/mobile clients (that's what im using) check here : http://i.imgur.com/F4dZKkN.png

It would still be possible to guess the usernames but it certainly minimises the risk.

 

Hopefully what i just wrote is understandable ^^

Aha! Either I didn't notice that Security screen or it just showed up when I did the latest update. Thanks! I'll mess around with that some before I decide how to approach this.

 

If you don't want passwords on your profile accounts then, you'll need to set up a VPN on your network and require authentication through that.

 

Yeah, the VPN option might be the way to go ultimately.

 

I did see a screenshot in another thread confirming that if I turn on passwords, the client configurator will prompt me for a password once to auto login. Just doesn't help with user switching, but not sure how much that will happen.

 

Thanks guys

[Beardyname 198]

hope it helps ^^

 

also not sure if you have found this other box, but what you can do is hide just certain users from the login page. For example you could hide the htpc users and let the rest of the users be password protected

[fraenhawk 61]

Yeah, I initially thought about that but then I couldn't switch from Adult to Kids on the same HTPC if they're hidden. It solves the internet problem though. I found a good guide for setting up VPN on WHS 2011 though (or I can put DD-WRT on my router).

[BC101 31]

VPN is overkill and there should be a more flexible options surrounding this.

- management of authorized devices (like netflix does),

- limit ability for API calls from external IPs until authtoken is obtained,

- your case, 

- etc.

Edited January 4, 2014 by BC101

[fraenhawk 61]

After messing with MB3 for a few more days I decided to put passwords on the two accounts and turn on the option plumblum pointed out. MY youngest kept changing the profile accidentally so a password makes a quick stop of that. Just set each HTPC to auto-login as the appropriate profile. Of course then I found out that both the Android and iOS clients ignore that setting right now, but that's okay