PMS: No web connections (app connections ok)

Plex Media Server Remote Access
,
1

Server Version#: 1.22.1.4228
Player Version#: N/A (Web browser)

I’ve been running PMS on Ubuntu for almost 5 years (current Ubuntu version: 20.04.2 LTS) using Public repo (not Beta). After upgrading from 1.22.0.4163 to 1.22.1.4228 yesterday, I discovered that web browser clients could no longer connect to my server. All app clients (Roku, iOS, Android, etc.) could still connect fine. And even that’s not completely accurate. ONE browser connection succeeds (Safari 14.0.3 running on Mac OS X 11.2.3). It was up before the upgrade, and, for reasons I can’t explain, it’s still working.

To be clear, when a user with a web browser (so far verified on Safari, Chrome & FireFox, both Windows & Mac OS; even Safari on iOS) logs in to app.plex.tv, they are told that my server is unreachable (verified on multiple accounts). This is true using a secure connection or a “secure=0” connection. This is true on the local LAN and remotely (via Internet). For what it’s worth, I have “Disabled” Secure connections (Server → Settings → Network), as both Preferred and Required have caused some issues with some client devices. That setting has not changed in years. The one working connection is “secure=0.”

The one browser connection working is on my local LAN, and I’m afraid to close that window. A connection directly to the server (i.e., https://:32400/) works. Using the same host and same browser (that has the working web connection), I can pull up a new tab or window, go to “app.plex.tv”, and it will claim that my server is unavailable. Using a different browser (i.e., Firefox, Chrome [incognito], etc.) on the same host show that my server is unavailable.

I attempted to downgrade to PMS 1.22.0.4163. The problem persisted, so I upgraded to 1.22.1.4228 again.

Attached is a debug output from a browser window of Safari 14.0.3 running on Mac OS X 11.2.3 (this is the same host that has the one browser window that works, and same browser, but different browser window). I see the same messages that we’re seeing on external hosts’ browsers on various platforms. My biggest concern are the messages “Aborting connection test for … due to mixed content prevention”. I’m having difficulty determining what that means, but one of the last times I saw it listed in the forum, it was understood to be a bug on Plex’s end (their site, not PMS).

It’s very strange to me that this seems to be working flawlessly with apps. It’s just web browsers (well, again, all but one specific instance). Any ideas? I’d appreciate any help. Let me know if there’s more information I can provide.

plex-client-logs-2021-03-26.txt (7.6 KB)

2

May I have the server logs (Settings - Server - Troubleshooting - Download Logs) ZIP file which captures this happening? (DEBUG logging ON is all I need. VERBOSE logging is too much and only serves to muddy up analysis )

3

I’ve recently been unable to access my server remotely from work as well. It used to allow insecure connection, but that option is no longer available.

May i please reply here as well with my logs @ChuckPa

Plex Media Server Logs_2021-03-26_12-31-28.zip (3.6 MB)

4

Certainly. This does NOT have verbose logging enabled. Plex Media Server Logs_2021-03-26_16-54-13.zip (4.3 MB)

5

@Jinxi

I am not seeing anything out of place but, in the interest of getting you back online, I’ve taken the initial step of resetting your certificate.

Please restart the server.

6

@jonfullmer

Thank you for those logs.

I can clearly see HTTP 401 (unauthorized) coming from user “rachel”.

First is an authenticated and then immediately being denied.

Mar 26, 2021 14:52:59.995 [0x7f0b720b4700] DEBUG - Auth: authenticated user 15309595 as rachel
Mar 26, 2021 14:52:59.996 [0x7f0afb7fe700] DEBUG - Request: [136.XX.XXX.244:56866 (WAN)] GET / (11 live) GZIP Signed-in Token (rachel)
Mar 26, 2021 14:52:59.996 [0x7f0afb7fe700] DEBUG - (Capabilities) Platform 'iOS' not matched by plugin platform requirements
Mar 26, 2021 14:52:59.997 [0x7f0b720b4700] DEBUG - Completed: [136.36.128.244:56866] 200 GET / (11 live) GZIP 1ms 4219 bytes (pipelined: 1)
Mar 26, 2021 14:53:00.001 [0x7f0b720b4700] DEBUG - Auth: authenticated user 15309595 as rachel
Mar 26, 2021 14:53:00.001 [0x7f0b720b4700] DEBUG - Request: [136.36.128.244:56867 (WAN)] GET /activities (12 live) GZIP Signed-in Token ()
Mar 26, 2021 14:53:00.001 [0x7f0b720b4700] DEBUG - Completed: [136.XX.XXX.244:56867] 401 GET /activities (12 live) GZIP 0ms 357 bytes
Mar 26, 2021 14:53:00.234 [0x7f0b728b5700] DEBUG - Auth: authenticated user 15309595 as rachel
Mar 26, 2021 14:53:00.234 [0x7f0b728b5700] DEBUG - Request: [136.XX.XXX.244:56866 (WAN)] GET /activities (11 live) GZIP Signed-in Token ()
Mar 26, 2021 14:53:00.234 [0x7f0b728b5700] DEBUG - Completed: [136.XX.XXX.244:56866] 401 GET /activities (11 live) GZIP 0ms 357 bytes
Mar 26, 2021 14:53:00.300 [0x7f0b728b5700] DEBUG - Auth: authenticated user 15309595 as rachel
Mar 26, 2021 14:53:00.300 [0x7f0b728b5700] DEBUG - Request: [136.36.128.244:56868 (WAN)] GET /activities (11 live) GZIP Signed-in Token ()
Mar 26, 2021 14:53:00.300 [0x7f0b728b5700] DEBUG - Completed: [136.36.128.244:56868] 401 GET /activities (11 live) GZIP 0ms 357 bytes

Equally disturbing is that iOS is a valid platform (player profile).

This is implying the installation did not go well.

Would you mind reinstalling the previous (1.22.1.4163 version) and retesting ?

I can provide you a link if you need it.

7

I have restarted the docker, but the same issue persists.

It used to give me the option to connect insecurely, but now it just doesn’t connect at all.

They have been making changes on the firewall at my work, so is that a possible thing to be blocking it?

8

Ouch. I keep forgetting this is Docker. I don’t know docker well enough to call for a specific version of PMS. Do you?

9

I do not, i just know recent updates with plex have broken a lot of ppls remote connections. Was hoping this was something that could be reverted/fixed on your end

Edit: I just installed a vpn extention in chrome and its now connecting. So i’m gonna go ahead and say its my works firewall tweaks that broke it. Lets see how long they let this fly lol

10

Chuck, thanks so much for your help. Your last statement left me a little confused. It’s currently running 1.22.1.4228. Did you want me to downgrade to 1.22.0.4163 again? I did try that, and the problem stayed. Did you want me to try that again?

11

One more update to the case. From another laptop on my local LAN (using Chrome), it’s now working. Yet from my original laptop (that has the one working browser window), it still doesn’t (with new browsers, windows, etc.). I’m reaching out for external feedback. This is really inconsistent (at least I can’t see a pattern).

12

@jonfullmer

Yes Please. Uninstall & reinstall 4163 then retest.

13

To be clear, I’m doing an apt-get delete plexmediaserver, then installing 1.22.0.4163. In process.

Also, I discovered that the working Chrome tab on the other laptop was open prior to the first upgrade (i.e., it’d been open for several days).

14

Clarifying for the sake of history, I used these two commands:

apt-get remove plexmediaserver
apt-get install plexmediaserver=1.22.0.4163-d8c4875dd

15

Okay, currently running 1.22.0.4163. We’re in the same state (or appear to be). The long-open browser windows are still working. New ones are not. iOS apps are still working (and I assume other non-browser).

I double-checked using an incognito Chrome window and logging in again (just to make sure there wasn’t a cache/cookie issue).

16

@jonfullmer

Yes on the uninstall and install.

I prefer to use dpkg -i ./plexmediaserver---- version.deb to avoid any ambiguity as to what I’m installing.

17

Do you want me to do it again using that method? And if so, I’ll need a link for the .deb package.

I have verified the version number I’m running. And the console is correctly telling me there’s an upgrade available.

18

I think you are PMS 1.22.0.4163? (as written above )

Just in case you or anyone else needs it.

19

Yes. Definitely PMS 1.22.0.4163. Still experiencing the same problem.

20

Jon,

I’m looking at your account.

I see one server; the “FLIX” server. Is this correct?

If so, I see what’s wrong with the certificate. Date/time is all wrong.

Is your machine’s date clock in sync with NTP? Plex.tv is showing November 2019