Project

General

Profile

User and login

Added by Rudi Hendrix about 5 years ago

Just had a pretty creepy experience...
Today I enabled port forwarding so my parents can watch Formula 1 through my server and tuners. All of a sudden I see recordings being added and someone with IP address 23.114.161.154 streaming Comedy Central from my systems!

So, I immediately disabled port forwarding, but it wasn't the best experience!

I thought I had a user set to enable the use of PVR as well, but it turns out I didn't. What is the best way to make this a little bit safer?
If I go to "Configuration", "Users" I can add a "Username" in "Access Entries". But what is the use of that?
I can also add users and passwords in the "Passwords" tab. Is that what I am looking for?

Obviously, I don't want to lock myself out either.

I would like to use HTTPS as well, but that doesn't seem to be as easy as ticking a box

Please help!


Replies (4)

RE: User and login - Added by saen acro about 5 years ago

users tab create user1
set corect permissions (use help)
password tab create user1 and password + persistent check

why is that
https://tvheadend.org/issues/4345
https://tvheadend.org/issues/2914

RE: User and login - Added by Rudi Hendrix about 5 years ago

Thank you for your reply!

I am reading through the Wiki as well and noticed: "Setting up access control is an important initial step as the system is initially wide open." Ahum.... missed that while setting up.
So, it turns out people are actively monitoring people that have port 9981 open. I only had it open for a while and noticed someone streaming through my setup and planning recordings. Fortunately, this person did not add a user and lock me out as that would have been possible, I guess.

I will also look for it in the Wiki, but I noticed you pointed out "persistent check" what does it mean? I can't really figure it out by reading the tooltip text what the difference will be between Yes, No and Default.

RE: User and login - Added by saen acro about 5 years ago

With right permission you can leave it open ;)

RE: User and login - Added by Rudi Hendrix about 5 years ago

In that case I'll leave it to default. In the Wiki and the documentation things are pretty clear. Some items in my version (4.2.8-36) seem to be a little bit different from the documentation, but the concepts are clear.

I haven't really created different users for controlling the software, streaming live TV, controlling PVR etc, but I did create some basic security.

All in all this seems to be a pretty decent replacement for TV Mosaic! Even when running this in Ubuntu LTS within Windows

    (1-4/4)