403 Forbidden

Ulrich G. · 2021-06-07T00:55:46+00:00

Hi, I am running a Synology NAS 1817+, and be in need for a replacement for TV Mosaic. Tvheadend was recommended, so I first activated the SynoCommunity, a...

Ueli Schläpfer

what helped in my case (DSM 7, DS716+) tvheadend 4.3.20210612-29:
- stop tvheadend
- login via ssh (with the terminal-App on your Mac) and copy the file: "service-setup" to a folder you can access:
- cp /var/packages/tvheadend/scripts/service-setup /volume1/public/
- search for this line in the file: service-setup:


SERVICE_COMMAND="${SYNOPKG_PKGDEST}/bin/tvheadend -f -u [...]

and insert -C between -f -u

SERVICE_COMMAND="${SYNOPKG_PKGDEST}/bin/tvheadend -f -C -u [...]

- copy the updated file to the scripts-folder:
cp /volume1/public/service-setup /var/packages/tvheadend/scripts/
- start tvheadend

Hiro Nakamoto

As soon I try to login with user&password I got error 403/forbidden. Did I get anything completly wrong?
DSM 7 on DS1621+, fresh installs, tested many times and the mentioned line in service-setup is already set by default.

A AAA

Same behavior on a QNAP NAS. When I installed TVHeadend QNAP Package I decided not to use any username/password for the moment.

But now I wanted to add several users (admins and regular users). Whenever I try to login with a named user I get forbidden. Only login without user/pass is possible.

How can I fix this?

A gerneral question:
I'm using TVHeadend only in local intranet, the NAS is not exposed. However VPN access is set up and usable on my internet router where my NAS is connected.
Is it still recommended to use TVHeadend with username/password or can this be omitted?
Or in other words: Is there any possibility that someone from outside can access my NAS and my TVHeadend admin page via browser?

davep

> Is it still recommended to use TVHeadend with username/password or can this be omitted?

Only you can answer that question.

If someone broke into your VPN and NAS what other data could they access? Your personal media, emails, bank details? If you are comfortable with the security of that information then maybe you would be OK with running TVHeadend unsecured.

Of course you might also want to protect TVHeadend from being interfered with by someone +inside+ your household...

I don't use TVHeadend's security.

Hiro Nakamoto

I just need the TvH security to separate admin/config from other users and separate the users from each.

Hiro Nakamoto

So there is no way to fix the 403-failure?
Or is the TvH security just broken and its recommended not to use it anymore?

Ulrich G.

Unfortunately yes, it seems that there is no way to fix that problem!
I have deleted, and reinstalled and so on several times, and just gave up on this.

mpmc

Invalid or forgotten login info?

Locateand cd to the tvheadend directory that contains the tvheadend folders as shown below, you may not have all of these files and folders but you should see "config" and most of them.

root@rpi3-1-1g:/home/mark# ls -lah ../hts/.hts/tvheadend/ total 4.9M drwxr-xr-x 13 hts hts 4.0K Mar 15 15:57 . drwxr-xr-x 3 hts hts 4.0K Jan 26 08:43 .. drwx------ 2 hts video 4.0K Jan 26 09:41 accesscontrol drwx------ 2 hts video 4.0K Mar 15 15:55 backup drwx------ 2 hts video 24K Apr 13 14:04 bouquet drwx------ 2 hts video 4.0K Jan 26 08:43 caclient drwx------ 4 hts video 4.0K Jan 26 23:39 channel drwx------ 2 hts video 4.0K Mar 15 15:42 codec -rw------- 1 hts video 1.6K Mar 15 15:55 config drwx------ 3 hts video 4.0K Jan 26 08:43 dvr -rw------- 1 hts video 4.8M Mar 15 15:57 epgdb.v3 drwx------ 3 hts video 4.0K Jan 26 08:54 epggrab drwx------ 4 hts video 4.0K Jan 26 08:50 input -rw-r--r-- 1 hts video 22 Mar 15 15:57 .lock drwx------ 2 hts video 4.0K Mar 15 15:42 profile -rw------- 1 hts hts 47 Mar 15 15:55 superuser drwx------ 2 hts video 4.0K Jan 26 08:48 timeshift

Notice the "superuser" file? In the above? If it doesn't exist create it, and make sure that it is owned and readable by your tvheadend user...

cd /home/hts/.hts/tvheadend/ # The path above may be different for your system, so modify this carefully touch superuser chmod 660 superuser chown hts:hts superuser # change hts:hts to match the user/group tvheadend is running as, use "ls -lah" on your tvheadend directory to find those out cat << EOF > superuser { "username": "adminback", "password": "adminpass" } EOF # This backdoor user & password must not already exist within your tvheadend config to avoid random issues. cat superuser # This should print out what we did before # Now restart tvheadend & it should pickup this superuser file & allow you to bypass the others you set yourself. systemctl restart tvheadend # or use whatever init your system uses

Constant 403 on trying to access the webui after failing to login?

Your browser is caching and automatically sending old and/or invalid login info. Remove any saved passwords (in your browser) then close the browser completely. And try again. If that fails, try another browser or an in-private window.

Bossman

Hello everyone, just installed Tvheadend and it brings back a lot of memories 9 years back. Anyway ,decided to get back in to the iptv game and saw this page with the error. The fix that worked for me back then and now is that tvheadend is sensitive to URL you have to put in http://yourip:9981 and then the welcome will appear. If you use local-host:9881 without the "http://" it's will not let you in. Hopes this helps. :

Bossman

Bossman Enable fire wall and add allowed ports

In terminal enable firewall

sudo ufw enable
sudo ufw allow 9981
sudo ufw allow 9982

retiredWithDogs

Bossman - Awesome! Thank you, that fixed my problem that I have been hitting.

FYI - I installed on Ubuntu using the Ubuntu store ("snap store"?) twice. Each time carefully giving username and password. On completion, and after reboot, it opened the web address "https://127.0.0.1:9981" and would not accept any username and password. But entering the actual IP worked.

Bossman

retiredWithDogs Glad it worked out.