All clients logging in under one user name

[T&J 8]

This is really strange

I let family members on my Emby server and for the last month or so they have been logging in under one family members name.

They live in different households and all but one have there own usernames.

I have one that had his own username until i completely redid my server from scratch windows 10 included around August of 2019.

No Emby backup all fresh install.

His name is not in my user list but he can get on my server using the name everybody else is (not that i care if he does)

But l went through my logs and found log ins from ip addresses from different devices i don't recognize from places around the world.

That concerns me a lot.

How can all these people log in under one user name that is not theirs.

Will pm activity log if needed.

[Luke 42079]

Hi, for starters, what credentials are they logging in with? That's the first thing you want to find out. These are users on your personal server, so they can only login with what you give them.

 

@@cayars.

[T&J 8]

Not sure what you mean buy credentials.

I sent invites to there email had them sign up to emby connect they loged in put there pin number in for rokus or fire sticks 

Each household has there own username and email

[Carlo 4561]

Why don't you change the password of the one account everyone is using (that they shouldn't) or remove it to stop any use of it..  Send family members a text, email or give them a call and let them know what account they EACH should be using.

 

You can also maybe remove devices that you don't recognize.

 

Keep in mind under the access tab for users you can set what devices that can use as well.

 

Let us know if this helps,

Carlo

[T&J 8]

Yea i thought about passwords and that is probably the route i will go.

Just thought it very very strange.

Seems like anyone can log in under one user.

Did not know about access tab....Very cool tool

[Carlo 4561]

If you want another set of eyes to take a look at your website, shoot me a PM with your server IP or domain name.  I don't need/want any account info.  I'll just check to make sure all your accounts are secured and not open to the public somehow via misconfiguration.

 

Carlo

 

PS If you can't solve this problem and need some one on one time let me know and I can be of assistance.  Just PM me.

Edited January 6, 2020 by cayars

[BAlGaInTl 288]

Yea i thought about passwords and that is probably the route i will go.

Just thought it very very strange.

Seems like anyone can log in under one user.

Did not know about access tab....Very cool tool

 

Wait....

 

So did you not have a password set up at all for one or more accounts?

 

If so, that's a big issue.  It doesn't take much effort to find an Emby server wreak havoc if it's not secured.