Latest Update "Breaks" Local "No Auth"

Server Version#: Version 1.20.4.3508

When I navigate to the local IP, I now am prompted to sign in, before I can see my content. All I can see is hosted content.

I can access settings as expected but I think that maybe local access was missed in the latest update…

I can pin my content, but it reverts. I’ve confirmed this behavior on browsers that don’t clear cookies etc.

I’m ok with the whole sign in / sign up behavior on web client at app.plex.tv, but I’m not loving the additional clicks for getting to my own content.

If that’s intended as a change, ok, I’ll accept it. However, I do ask that you reconsider before making these kind of changes.

Server administrators don’t love seeing content they’ve disabled. (Or having to sign in to a thing on their own networks unnecessarily)

Also, I invite other’s to chime in. Full disclosure, I’m 3 fingers deep in a good Islay and may not be conveying this well :wink:

Stop the server
Manually collect the logs (since you can’t sign in as the owner) using a .tar.gz of the Logs directory (under Plex Media Server)

Hey @ChuckPa

I’ll attach them but I can sign in as the owner. It’s not really a “log” type issue, I think. It’s more of a UI flow type deal.

Even without signing in, I can get to the settings page. I just don’t see my content and only see the hosted content regardless of changing what’s pinned, etc.

But, as requested, logs:

Plex Media Server Logs_2020-10-27_20-20-11.zip (5.6 MB)

P.S. Thank you for everything you do. It’s not said enough but you are a great resource for the Plex v Linux users.

Do you know the router that PMS is behind is itself behind another router?

Oct 27, 2020 20:06:57.102 [0x7f3c6d7fa700] DEBUG - NAT: UPnP, public address is 192.168.1.223
Oct 27, 2020 20:06:57.102 [0x7f3c6d7fa700] DEBUG - PublicAddressManager: got WAN IP 192.168.1.223 from router
Oct 27, 2020 20:06:57.102 [0x7f3c6d7fa700] WARN - PublicAddressManager: WAN IP is a private IP address

It appears to be working but not certain because the scanner is running and filling the logs.

It won’t be remotely accessible this way.
are you accessing the server from the correct IP/subnet ?

Also, for “just in case” sake.

  1. Stop plex
  2. sudo chown -R plex:plex /var/lib/plexmediaserver (adjust appropriately if you use different username or directory)
  3. Start plex

I suggest because file permissions and DNS+plex.tv access are the two main things required to ‘pin’ and make something stick.

Not sure what you are referring to. My architecture is thus:

ISP fiber demarc (public facing IP, no router) > firewall / router (same device) > switch > NAS IP & Plex IP.

Everything is on 192.168.1.0/24

The laptop I’m coming from is .15.

.223 is a wireless mesh system (orbi) in AP mode.

In short, only one NAT but that’s upstream from the server with port forwarding on 32400.

Sorry, saw your edit after replying.

Permissions are good:

drwxr-xr-x 3 plex plex 4.0K Dec 28 2019 Library

Additionally, this literally only started after latest update. One minute I could see my stuff, update and it “broke”.

Changing the software isn’t going to ‘break’ stuff.
What probably happened is

  1. it broke before but, because it was running, held the file(s) open
  2. Restart made it start over – which exposes the breakage.

so I am 100% certain.

  1. “breaks” local “no auth”
  2. You can’t access the server without signing in.

Correct?

Check:

Settings - Server - Network - Show advanced - IP addresses / subnets allowed with out auth.

Is this what you mean?

(getting late here and a bit tired)

All good bud, I crashed myself.

Sure. I just mainly am not certain how to convey exactly what I am meaning.

You are correct that allowed local subnets without authentication is the main setting I’m referring to. My /24 is in there (and has been for a long time)

I’d refute the notion that it broke before the update, given I had restarted the server earlier in the day, and this wasn’t an issue. It was certainly something within the update.

So, to be as clear as possible.

Steps and results:

I navigate to my server IP 192.168.1.100:3200/web. Previously, I could see my libraries and no hosted content, as I had hosted content disabled.

Now, I only see hosted content and have to sign in to see my content. I can get into settings though. This allows me to pin my libraries to the home page, but only for that session, unless I sign in. Once I exit the browser, these pins revert back. (I tested on a fresh install of two different browsers, to ensure cache / history purging wasn’t a factor)

In essence, it negates about 50% of the use case for allow local subnets, since you have to sign in to get a reliable experience, unless you want to reconfigure the home screen every time to go in.

Hopefully this makes more sense? I’d be happy to screen record, screenshot, whatever.

Would you check your Preferences.xml for me?

You should find the expected allowedNetworks="192.168.0.0/24" similarly formatted pref ?

To further test what I think you’re saying.

  1. Installed 1.20.4.3508-6abbd541f
  2. Confirmed allowedNetworks="192.168.0.0/24" still exists in Preferences.xml
  3. Opened Firefox
  4. Hosted content is the first shown
  5. Clicking “MORE>” opens my content.

How it opens:
Screenshot from 2020-10-28 11-41-00

MORE >
Screenshot from 2020-10-28 11-41-15

Chuck, I think what he is saying is that he did not have to click MORE before seeing his content (already/still pinned).

@ChuckPa I confirmed the network is allowed:

allowedNetworks=“192.168.1.0/24,192.168.86.1/24”

@TeknoJunky That is partially correct. If it was only that I had to click more, I’d be somewhat OK with it. The bigger issue is that, in order to see anything other than the library name, I need to re-pin it each time.

Think of the flow most admins (I’m making an assumption, I know) use the embedded web server for.

I add a movie, a full show and a single episode.

I scan my libraries.

To ensure they match correctly, have a poster that is in my language (a whole other can of worms that off topic) and are there, I have three options now.

  1. I can sign in, which defeats the allowed subnets.
  2. I can click more and pin the applicable libraries so that the content shows up on the home page.
  3. I can click more and enter each library.

All of these put additional steps in to what used to only be about 50% of the total time / effort.

Can we still achieve the end result? Of course. Should we have to?

So this is the fundamental issue?

  1. I can sign in, which defeats the allowed subnets.

Which apps even allow direct connect without signin / Linking to the account?
I know of none with the singular exception of Plex/web

Yup, this is all around administrative tasks, at least for myself.

If the intention was to change the behavior of allowedNetworks, ok. Don’t love it but can accept it.

If not, I’d consider this an unintended consequence of the recent update, hence my reporting it here.

Do keep in mind though, this changes how admins can use the embedded web. If they happened to use it for playing content as well, it changes that process. I won’t go down the rabbit hole of if they should, but recognize that some do.

eh, I only use Plex Web

you can access all of your servers (if you have more than one) from a single page.

anymore, the only time I ever go to the local ip is if/when plex is down or my server died or something.

And that’s absolutely cool. My assumption (labeled as such for this purpose) could be wrong.

So is this being given any further consideration or is it being allowed to die?

As of 1.21 this is still broken.