Plex instance can't scan library, add in Plex & Plexamp. Seems like a network issue

[Thomassey]

Server Version#: 1.31.2.6810
Player Version#: 1.83.1.4061-d3f45728
Log:

Dec 08, 2023 11:27:01.575 [0x7eff59a5bb38] Debug — Request: [10.2.2.15:52493 (WAN)] GET /status/sessions/background (17 live) #6a29a TLS GZIP Signed-in Token (Thomassey) (Thomas_Laptop)
Dec 08, 2023 11:27:01.575 [0x7eff679b2b38] Debug — Completed: [10.2.2.15:52493] 200 GET /status/sessions/background (17 live) #6a29a TLS GZIP 0ms 397 bytes (pipelined: 30)
Dec 08, 2023 11:27:01.580 [0x7eff5ce99b38] Debug — Request: [10.2.2.15:52469 (WAN)] GET /status/sessions/background (17 live) #6a274 TLS GZIP Signed-in Token (Thomassey) (Firefox)
Dec 08, 2023 11:27:01.580 [0x7eff679b2b38] Debug — Completed: [10.2.2.15:52469] 200 GET /status/sessions/background (17 live) #6a274 TLS GZIP 0ms 524 bytes (pipelined: 21)
Dec 08, 2023 11:27:03.156 [0x7eff5bd82b38] Debug — Push: Waiting for refresh queue of 1297 items to quiesce.
Dec 08, 2023 11:27:03.844 [0x7eff5bf85b38] Debug — Request: [10.2.2.15:52493 (WAN)] GET /library/sections/3/refresh (17 live) #6a2cf TLS GZIP Signed-in Token (Thomassey) (Thomas_Laptop)
Dec 08, 2023 11:27:03.844 [0x7eff5bf85b38] Warning — [Req#6a2cf] Need to be signed in and connected to the Internet to refresh a plex music library.
Dec 08, 2023 11:27:03.844 [0x7eff677afb38] Debug — Completed: [10.2.2.15:52493] 503 GET /library/sections/3/refresh (17 live) #6a2cf TLS GZIP 0ms 401 bytes (pipelined: 31)

I can use the Last.FM agent, but I can’t use the default Plex Music agent to scan my library. I presume this has something to do with the Last.FM agent not needing internet access. I did some research and discovered the my ESXi instance (host of VM for my media server) has a NTP issue, but I managed to resolve that (it was always off by a couple of mins) but now after running the date command in the VM, it is always right within 1-2 seconds.

My other issue is that my plex instance can be access via the web via a cloudflared instance, but I cannot add the library’s to my Plexamp nor can I add the library’s on Plex, it is only accessible via the web.

My hypothesis would be that it still a network issue, has anyone got any ideas on how to fix this?

[ChuckPa]

@Thomassey

I looked at your account.

You have a server (watch43) which had several certificate error problems.
(you had used up your quota of certificates in very short order).

I reset the certificate for you.

Please restart the server and see if it can now sign into your account.

Be advised, if you’re using your FQDN to access Plex, you must also add the cert to PMS for it to work correctly.

The cert P12 must include the Key, Cert, and CA for PMS to accept it (when PMS starts)

Given OpenSSLv3 is now the standard, you need to take this into consideration when generating your cert.

Linux Tips

OpenSSL v3.0.0 and PMS. For those using their own domains and certificates with PMS , PMS 1.32.0.6865 and above updates OpenSSL from v1.1.1 to v3.0.0 . (changed the numbering scheme in the process) The consequence of this is OpenSSL v3 removed several “less secure” encryption methods. The impact on you, if you’re using an older distributions where openssl v3 is not the default, if not already doing so, you will need pay special attention to how your certificates are generated As example,…

[Thomassey]

Hi there Chuck!

Thanks for the reply. I have tried what you have suggested, here is what my certs etc look like:

thomas@media:~/Networking$ ls -la
total 28
drwxrwxr-x  2 thomas thomas 4096 Dec  8 16:24 .                 
drwxr-x--- 13 thomas thomas 4096 Dec  8 16:11 ..                
-rw-rw-r--  1 thomas thomas 1448 Dec  8 16:14 ca.pem            Cloudflares Origin CA RSA PEM
-rw-rw-r--  1 thomas thomas 1671 Dec  8 16:12 cert.pem          My website.co.uk PEM Certification
-rw-rw-r--  1 thomas thomas 3119 Dec  8 16:14 chain.pem         The output of "cat cert.pem ca.pem > chain.pem"
-rw-------  1 thomas thomas 4019 Dec  8 16:24 certificate.p12   Output of "openssl pkcs12 -export -out certificate.p12 -certpbe AES-256-CBC -keypbe AES-256-CBC -macalg SHA256 -inkey privkey.pem -in cert.pem -certfile ca.pem -password pass:MY_PASSWORD
-rw-rw-r--  1 thomas thomas 1704 Dec  8 16:11 privkey.pem       My website.co.uk PEM Private Key

And here is what my PMS config looks like:

I have restarted PMS and I still get the error:

[Req#3da] Need to be signed in and connected to the Internet to refresh a plex music library.

Here are my logs incase something may have changed that I can’t see:
PMS Logs.txt (564.7 KB)

I have looked around a bit and not seen any other articles like this - is this a very niche issue?

[ChuckPa]

It would have been nicer to see the whole ZIP (even a tar.gz of “Logs”) but you were fortunate in that your snippet caught a strong hint.

Dec 08, 2023 16:30:25.465 [140031097109304] Warning — [HttpClient/HCl#33] HTTP error requesting GET https://www.watch43.co.uk:443 (6, Couldn’t resolve host name) (Could not resolve host: www.watch43.co.uk)

If you can’t look up your own hostname(s),

how likely is it you can’t look up plex.tv to sign in?

Dec 08, 2023 16:30:24.298 [140031043025720] Debug — [MediaProviderManager/MetadataAgentManager] attempted to online our built-in agents but we’re not yet signed in

How is the DNS lookup configured ? Does it point to the right IP / Google ?

Found this –

Dec 08, 2023 16:30:27.097 [140031066229560] Debug — NAT: UPnP, didn’t find usable IGD.
Dec 08, 2023 16:30:27.097 [140031066229560] Debug — PublicAddressManager: Mapping failed.
Dec 08, 2023 16:30:27.097 [140031066229560] Debug — MyPlex: mapping state set to ‘Failed’.

Is the gateway IP configured correctly ?