PlexData share for QNAP systems

That’s correct behavior.

QTS installs packages as user admin be default.
I also use this convention because I never know how systems are used.

I accepted this because it guarantees only the actual admin (or someone with admin login and full control) has permission.

It’s a way of ensuring others who use the system don’t have access to your personal data.

This is a user-administration issue. Check the rights assigned to that username if it’s to have access.

I agree it must be a user rights issue but I’m 99.9% sure I’ve set all the permissions correctly for the “dan” user. It even shows R/W on the users permissions of the preferences.xml file I’m unable to open when using text editor see screenshots…





I’ve set these R/W permission for dan from within the admin account. I’ve applied and un-applied, logged-in/out of users, rebooted the NAS.. despite QTS saying otherwise I just can’t get any users other than admin to get write access on /PlexData/Plex Media Server folder, its files, and sub folders.

1 Like

Having had a good read through all of the above more carefully (and not skim reading during my lunch break) I’m going to try the old trick of stop Plex, delete the PlexData share, recreate assigning the desired permissions and restart Plex. Having read all of the above I’m convinced this will solve my issue.
However I still don’t understand why when I logged-in as the system admin and assigned R/W to my typical administrative user it actually grants RO despite saying otherwise in QTS.

One thing not stated: “Restarting QTS”.

So I stopped Plex, deleted the “PlexData” share folder keeping ‘delete the data’ box unchecked. I then recreated the share folder assigning R/W permissions accordingly but guess what?.. didn’t make any difference! Still only have RO permissions from the Plex Media Server folder and below for my dan user despite it being configured for RW. The system admin account of course still has complete control.
I’ve rebooted the NAS a number of times but this hasn’t made a difference either. I got in touch with QNAP support about this and recieved the following response, “You can only use the built in admin account for editing sytem files as this is a superuser account, then once edited you can then disable the admin account again, but this is the only way for system files to be edited.”

I’m not going to argue with the OEM, so I guess each time I want to edit the preferences.xml file or do anything else that requires more than read-only privileges I’ll have to; login as normal, enable the admin account, logout, login as admin, make the changes as the superuser, logout, login as my other dan (admin) account and disable the system admin account again. What a faff!

Is it just me, or is this really what everyone else does that has the admin account disabled by default?

@Shpaniel

I understand what you’re trying to do but don’t think it’s going to work because the package is installed as user admin. admin is the owning UID & GID . On QNAP, admin translates to UID & GID = 0 (which is rootby all other references).

The Plex files are written as UID = 0 (admin) by QTS. I have no control over it.

This might be something to take up with QNAP on how to elevate the privileges of a user to group 0 (which I believe is the ‘adminstrators’ group)

I do know you can ‘hack’ the system and change the username UID/GID but by doing so, you are making that account ROOT.

Remember, PlexData is pointing into Protected Storage not normally accessible to the average user. Restrictions will apply.

I got this error also.

Am I understanding this correctly, that /PlexData is just a symlink as it were to /share/CACHEDEV*_DATA/.qpkg/PlexMediaServer/Library/Plex Media Server for the purpose of displaying it in FileStation?

I corrected it by removing and readding the folder via shared folders. It populates correctly now.
But I have to admit, I’m sort of scratching my head as to what the point of this is?
All of this is already accessible by ssh.

Please excuse my ignorance. It’s been a long day!

Correct, as well as when created, it autoupdates if PMS is migrated to another volume

Easy access, since not everyone knows SSH :wink:

Thanks for the quick response.
Is it not introducing potential for security issues? You’re wanting something that should only be admin level, to be editable by general users (at admins discretion of course) but not everyone knows what they’re doing with that (just like not everyone knows ssh).
Having had a few qnaps now, i think its quite deliberate that it’s not displaying all of the directory structure in filestation.
You’re installing in admin/hidden directories, but then doing this to unhide them / unrestrict access to it.
Call me crazy, i feel like its a bad idea somehow :\

  1. “PlexData” is a real shared folder
  2. “Plex Media Server” is a symbolic link inside that shared folder.
  3. Access to the link is protected by the permissions granted by the admin. Those without permission to access it are not aware of its existence.

Thanks.
Just a suggestion, perhaps make this an optional feature. Maybe a simple toggle switch in the server settings to enable/disable this feature, with some linked instructions to setting it up securely if you enable it etc?
Appreciate your work.

Effective 1.20.2

  1. Usage is 100% optional
  2. If the PlexData share does not exist, nothing happens.
  3. If there is a PlexData share which you use for other purposes, creating a dummy file .disablePlexDataSymlink completely disables (turns off) the feature.
1 Like

is 1.20.2 still in the pipe?
Can’t seem to find it.
I’ve removed the share for now. Hasn’t complained about it not being there so far.

Yes, 1.20.2 is “in the pipe”.

My packaging changes have already been tested and approved.
When Engineering releases 1.20.2 , my changes will be included.

But my dan user IS in the ‘adminstrators’ group.
It’s OK, I can live with enabling/disabling the admin user and using that when required. I just wanted to see if this behaviour is the same for everyone else that owns a QNAP, and that the only way to ever have true RW in the Plex Media Server folder is by going in as the system admin account?

This then leads me on to another question… one probably best suited for a new topic - I have some questions/concerns about security and ensuring data integrity of my media while using Plex Media Server. Is there a section or an active topic for questions and discussions like these?

I have looked into that myself. In all cases I discovered any issues were created by third party add ons, Tautulli being one of the most likely, seems not installing it perfectly leads to many possible security issues.

Otherwise there has never been an issue I read about and I have had 3 attempts to hack into my NAS, two from China one from Russia all rebuffed. I do wish QNAP would instate a GEO IP feature.

@Shpaniel

Is user dan UID = 0 ?

This is a restricted storage area by QNAP.

[/share/CACHEDEV3_DATA/.qpkg/PlexMediaServer] # ls -la
total 42068
drwxr-xr-x  5 admin administrators     4096 2020-08-30 19:31 ./
drwxrwxrwx  4 admin administrators     4096 2020-08-30 19:32 ../
-rwxr-xr-x  1 admin administrators  1561592 2020-08-27 05:11 CrashUploader*

Group administrators will let you read but not let you write unless you modify the package installation manually.

Secure the admin account with a properly strong password , 16+ characters in length (a complex word), containing Upper & lower case plus digits and punctuation.

Further minimize access from the outside word by either disabling or making “MyQNAPCloud” private.

SUPPLEMENTAL:

Regarding GeoIP, I don’t trust the vendors to do what’s right. I have that capability in my pfSense block. I have two layers in the pfSense: 1. Basic firewall rules make me a ‘black hole in the internet’. Nothing is returned (ACK or NAK) when unsolicited. Should I have servers which are world-wide possible, I restrict them to NATO countries for my peace of mind.

Hello guys,

I would like to report my issue.

Same warning error but even with that message my PLEX Server works perfectly.

I can access to my Plex media server library from my PC, my TV, my NVShield (all connected via LAN) and from all my wifi devices without any problems.

Further more I never had this “PlexData” folder in the list below:

I simply share on my PLEX server my existing media folder "03 - Media Video) and that’s it.

So at this point because everything still working as intended I would like to know only how I can stop the generation of such errors.
There is any ignore list which can avoid those errors pop again and again ?

Best regards and thank you in advance for any help.
Enrico

Enrico,

You’re right, the PlexData share doesn’t impact normal operation in any way.

There are some QNAP models, like yours, which generate the error. I cannot figure out why. It should work on all QTS systems but doesn’t.

Because of this, effective in PMS 1.20.2, it will no longer attempt to create the PlexData shared folder.

If you would like the error to stop now, try:

  1. Create a shared folder , named PlexData, on any volume you wish (first / main volume is usually easiest).
  2. Assign it permissions as you wish.
  3. Restart PMS.

Thank you, I’ll wait the 1.20.2
thank you again,
Enrico.