I just validated that the latest version of the LDAP privilege escalation issue is not an issue anymore. The curl script is in the ticket.

This was the one where a standard user could get plugin credentials, such as the LDAP bind user, and change the LDAP endpoint. I.E., bad.

I chose this one because after going through all of them, it was the only one that allowed access to something that wasn’t just data in Jellyfin.

So for me, security is less of an issue knowing that, as only family use the service, and the remaining issues all require a logged in user (hit admin endpoint with user token).

Plus, I tried a few of those and they were also fixed, just not documented yet. I didn’t add to those tickets because I was not as formal with my testing.

@EncryptKeeper@lemmy.world

Use an LDAP to OIDC bridge?

Either comment OP hasn’t followed the news, or they forgot this was the Fediverse.

I used to do all the things mentioned here. Now, I just use Wireguard. If a family member wants to use a service, they need Wireguard. If they don’t want to install it, they dont get the service.

Actually #2 may be a brain fart for me. I’m probably thinking of the setting in the Arrs that changes file date to release date.

Ahh OK, a Docker bind. 3 things to check:

1. That you added the folders in that weird way Unraod requires, see: https://forum.jellyfin.org/t-solved-jellyfin-not-detecting-media-in-unraid (this probably isn’t it, but worth checking)

2. Make sure for newly added, Jellyfin is configured for Date File Scanned into Library, vs the Created Date on the file

3. Ensure the Arrs aren’t set to change the date on file import. By default they modify created/modified dates to be the release date, which can put things in an unexpected order.

Hmm, shared how? NFS?

https://github.com/SynoCommunity/spksrc/issues/5941 ?

I really wanted Jellyfin working in my DS214Play with DSM6, and I noticed that a package for these evansport CPUs doesn’t exist and it’s officially not supported, so I tried myself and I succeeded.

Frame it. Neato.

How is your underlying file system set up?

Can your router open ports from a hostname vs an IP? If so, clients could run dynamic DNS.

WG client side isn’t really that hard, though. All the fam run WG 24/7 on devices, and only traffic for the internal network goes through it.

Old news, but time for Jellyfin. I made the switch a couple months ago. Some minor teething issues, but better, IMO, especially now as my family all have LDAP users and that just works.

You one-upper, you.

None of that is illegal. He states he purchased the media. And it’s certainly not harmful content.

GitHub Application Manager (GAM): https://github.com/fmstrat/gam

It’s like apt for installing directly from Github releases. A plug, sure, but I still use it regularly for things like FreeCAD, Cura, OrcaSlicer, and so on.

I invented WinApps. http://nowsci.com/winapps

I had a conversation started with the org fr their takeover and they just dropped off. If anyone from there is reading this, please reach out.

Yes? There are Lemmy clients that are open source, for instance. And the Wireguard client is.

Granted this is not Headscale’s fault, they’re just using Tailscale clients. Either way I’m glad I use a roll-your-own Wireguard.

I and my partner also don’t use those OSs, but it’s more the point of using FOSS when we can.

Yea, but in iOS?

Join our Discord server for a chat and community support.

Sigh…

And even worse:

Everything in Tailscale is Open Source, except the GUI clients for proprietary OS (Windows and macOS/iOS), and the control server.