Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[new2hifi]

Hi:

I have Access Key and Authentication setup in MC20. DLNA Server, its Renderer and Controller are already disabled on my MC20. However, if ANYONE on my LAN goes to Windows 7 - My Computer - Network - Media Devices - MC Instance Media Player - Right click - View device webpage - WebRemote JRiver - Playing Now;  that ANYONE has now control of my MC20.

Either I am missing a simple thing or MC player has this inherent big giant security problem on LAN.

Help!

[JimH]

It should require a login and password if you have authentication set. 

If you're running Media Network, it has several servers.  That's how it works.  Shutting off DLNA doesn't turn off Media Server.  See the wiki topic on Media Network for more information.

Turn off Media Network if you don't want to provide access.

[Arindelle]

or you could use the "User" function and deny access that way too I think.

[mwillems]

I think part of what you may be seeing is that on web access MC typically asks for the authentication credentials, but there's a box you can check that says "remember my authentication credentials" or something to that effect.  So If you ticked that box (or left it ticked, I can't recall the default) subsequent network accesses from the same computer will go through without any request for credentials. 

To test if that's the issue try logging in from a computer you haven't used for this before and see if it asks for credentials (it should).  You may be able to "reset" things by clearing your browser cache, but I haven't tested that solution.

If you can log in to the web interface with no credentials on a computer you've never used to access the web interface before, report back, as that would be odd.

[glynor]

It also does not prompt for authentication if you connect to localhost. So, if you were testing this from the server machine you'll get different results.