Forgot Password doesn't work

[billvv 2]

Emby has been working on windows for me for a few years, and I've had no reason to manage it but now I do. I am getting the invalid username or password screen. I know the username because I can click the user icon with my user name under it.

 

I have selected 'Forgot Password', opened the text file and entered the PIN. When I go to the login screen and click the icon with my username under it, it takes me to a screen with the username filled in. I leave the password blank and hit return and get the invalid username or password notice.

 

In that process, I found that using the IP address on the pin code text file does not work and have to use 'localhost' instead.

 

Do I need to re--install emby or the server, or is there another solution?  

Edited November 22, 2019 by billvv

[Luke 42083]

 

 

In that process, I found that using the IP address http://192.168.xxx.x...asswordpin.html(x's are my edit) does not work, and have to use 'localhost' instead.

 

Hi, what happens when you try?

[billvv 2]

Spinning circle then it stops trying to load - blank screen.

[Luke 42083]

What version of Emby Server? What browser are you trying to do this with?

[billvv 2]

Server version 4.2.1.0, Pale Moon browser.

 

If I update (re--install?) the server, will my settings change to default?

[Happy2Play 9783]

Server version 4.2.1.0, Pale Moon browser.

 

If I update (re--install?) the server, will my settings change to default?

No, but do you have another browser that you can try?

[Luke 42083]

Isn't Pale Moon based on an old version of Firefox?

[billvv 2]

Isn't Pale Moon based on an old version of Firefox?

Yes..

 

I can download firefox and try it.  I have an old version of Explorer which didn't work.

[billvv 2]

Downloaded Firefox and my normal login seems to work. Thank you.

[Luke 42083]

Thanks for the feedback.

[acnp77 67]

@@Luke

on my old server 3.2.70.0 I clicked "forgot password" for 1 user. then it gave me the info that a temp pin is stored at /var/lib/emby-server (which is in plain text) and the web-address where I can enter the pin. (.../web/forgotpasswordpin.html).

After entering the pin ALL user accounts had blank passwords. And it is no longer possible to set a new password. Whatever I do, I get "Invalid username or password. Please try again.". So now all user have no password. Is there any chance to set a new pw? I was planing on keeping the old server running till the new one was configured properly. But ok, I will just have to hurry up then. I stopped forwarding the port and so I think it should be safe.

 

Much more important: In the new version 4.x is it still possible for any user (or worse: anybody, even if they have no user account) to click on "forgot password" and then get the directory on the server where there is a plain text file with a temp pw?. I know they would not have access to the server, but it's still way too much information.

 

Thanks

[Luke 42083]

 

 

Much more important: In the new version 4.x is it still possible for any user (or worse: anybody, even if they have no user account) to click on "forgot password" and then get the directory on the server where there is a plain text file with a temp pw?

 

Yes but they would need physical access to the system in order to complete it. Emby Server is your personal media server, not ours, so there's no ability to do things like use email or text messages from your machine unless we want to either require you to set these things up, or involve our own servers in order to accomplish it. So the current mechanism of resetting a password is designed to be something that every Emby server admin can use regardless of the capabilities of their personal server.

[acnp77 67]

Yes ,you are right. And I do very much appreciate the architecture of the system, meaning that it is my server, without any online accounts, registration or connection to your servers.

Thanks for the explanation.

[Luke 42083]

Thanks for the feedback.