Unauthenticated Access localhost local subnet

[cdogg]

Is there any way to enable "Unauthenticated Access" for just the localhost or local subnet BUT still force login/pin for outside the network or localhost?

[mvallevand]

No. I have lobbied for this and for removing the password for the web browser, but sub wants to keep it. He does have a point in that users who don't know what they are doing, could easily open their systems to the Internet if like many they run on a proxy server.

Martin.

[sub]

It's too easy to fake where a web request is coming from. I can never be 100% certain a request is actually coming from the local network.

I've made it super easy to tick the 'remember me' tickbox in the web app, or to enter the connection detail in apps etc and have them remembered though, so it's not a major inconvenience.

[cdogg]

I can understand as far as novice users go, they can be just smart enough to cause themselves some major havoc! As a slightly more advanced user, I've found that various plugins and scripts that folks write to work with nextpvr, kodi, and all our other toys also only have but so much education and time. I'm personally not any kind of coder so ALL THANKS goes to all these folks that make these things happen.

I do have nextpvr sitting behind a proxy for the added security of course. My issue is that I have another service on the same machine that makes calls to nextpvr and authentication needed for playing recordings is an issue. All else works except playing recordings because the scripts just can't the pin or login info to work properly. Similar to how something would be played with VLC, MPC, etc. It looks similar to the issue with Emby and Jellyfin where they need/want authentication off. I'm sure the coders have their reasons of course. I'm pretty sure I could learn some apache and create an ACL based on IP but do you guys have a better idea for going about this? Local network not needing access, just localhost.

[mvallevand]

My issue is that I have another service on the same machine that makes calls to nextpvr and authentication needed for playing recordings is an issue.

You "service" is the problem.  For that use case I made sure that the Jellyfin and Emby addons had optional access to the filename instead of the URL.   

Martin

[cdogg]

Please explain just a touch more by "For that use case I made sure that the Jellyfin and Emby addons had optional access to the filename instead of the URL". I am doing the calls via URL yes.

[mvallevand]

The API you use to get the recording_id also provides the filename. If your "service" can't stream from that, simply use Jellyfin or Emby for remote playback.

Martin

[cdogg]

Alrighty so I tried Emby and after alot of fumbling around, and I hope this helps others.
Using latest NextPVR Server with password and pin setup
Latest Emby Server, uninstalled unnecessary plugins, rebooted, did multiple "refresh guide data" under "live tv / dvr" setup, rebooted and repeated
Copied the nextpvr .dll file to the plugins folder, rebooted/started emby server
Using NextPVR Plugin 3.7.5 in Emby with the following settings; donate checked, filename NOT streaming, default to new episodes only
Rebooted yet again
Refresh Guide Data just once more and all is working great.

...and NO unauthenticated access has been granted in any way. I believe it was the filename selection in Emby that made it all come together. Better than my alternative options/ideas for sure.

As always, these forums are AWESOMELY helpful!!! Thanks guys!!!

[mvallevand]

Recordings have nothing to do the guide data not sure why you tried that. The instructions here https://emby.media/community/index.php?/...77262_menu are basically what you had to do and it also shows the unaddressed Emby issue basically there does not appear to be a way in Emby to refresh the recording location once it is stored.

Martin