# LDAP access from External Jellyfin

**URL:** https://forum.yunohost.org/t/ldap-access-from-external-jellyfin/22925
**Category:** Advanced use case
**Tags:** english
**Created:** [January 4, 2023, 1:57pm UTC](https://forum.yunohost.org/t/ldap-access-from-external-jellyfin/22925 "2023-01-04T13:57:16Z")
**Posts on this page:** 7
**Page:** 1

<div class="post-metadata">

### Author: ![seedrick](https://forum.yunohost.org/user_avatar/forum.yunohost.org/seedrick/32/3672_2.png) [@seedrick](https://forum.yunohost.org/u/seedrick)
#### Post date: [January 4, 2023, 1:57pm UTC](https://forum.yunohost.org/t/ldap-access-from-external-jellyfin/22925/1 "2023-01-04T13:57:16Z")

</div>

Hello, I have what I believe to be a quick one for a second pair of eyes:

### My YunoHost server

**Hardware:** Rpi 4  
**YunoHost version:** 11.0.10.2  
**I have access to my server :** via all methods  
**Are you in a special context or did you perform some particular tweaking on your YunoHost instance ?** : some DNS/hosts file stuff

### Description of my issue

I have Jellyfin installed on a synology NAS on the local network. I would like the Jellyfin instance to use my Yunohost server for LDAP. None of the suggestions I found in the search are any help. I also tried installing Jellyfin on the Yunohost server so I could copy the config–everything but the IP address is the same and I get a `Connection Refused` in the Jellyfin logs.

* * *

---

<div class="post-metadata">

### Author: ![tituspijean](https://forum.yunohost.org/user_avatar/forum.yunohost.org/tituspijean/32/3584_2.png) [@tituspijean](https://forum.yunohost.org/u/tituspijean)
#### Post date: [January 4, 2023, 5:08pm UTC](https://forum.yunohost.org/t/ldap-access-from-external-jellyfin/22925/2 "2023-01-04T17:08:27Z")

</div>

What you want is to open YunoHost’s LDAP to other servers. You can have a look to [External LDAP authentication - #2 by tituspijean](https://forum.yunohost.org/t/external-ldap-authentication/15690/2). There, put your NAS’ IP address instead of `10.0.0.1`.

---

<div class="post-metadata">

### Author: ![seedrick](https://forum.yunohost.org/user_avatar/forum.yunohost.org/seedrick/32/3672_2.png) [@seedrick](https://forum.yunohost.org/u/seedrick)
#### Post date: [January 5, 2023, 2:47am UTC](https://forum.yunohost.org/t/ldap-access-from-external-jellyfin/22925/3 "2023-01-05T02:47:50Z")

</div>

Thank you! I can now hit the server from the NAS! My issue now is the Admin permission filter–is there a way to keep the permissions set by the Yunohost Jellyfin install if I remove it? I would like to continue using `(permission=cn=jellyfin.admin,ou=permission,dc=yunohost,dc=org)`. Thanks!

---

<div class="post-metadata">

### Author: ![tituspijean](https://forum.yunohost.org/user_avatar/forum.yunohost.org/tituspijean/32/3584_2.png) [@tituspijean](https://forum.yunohost.org/u/tituspijean)
#### Post date: [January 5, 2023, 7:07am UTC](https://forum.yunohost.org/t/ldap-access-from-external-jellyfin/22925/4 "2023-01-05T07:07:12Z")

</div>

> [@seedrick](#):
>
> My issue now is the Admin permission filter–is there a way to keep the permissions set by the Yunohost Jellyfin install if I remove it? I would like to continue using `(permission=cn=jellyfin.admin,ou=permission,dc=yunohost,dc=org)`.

Sorry, I have not understood what you want to do.

---

<div class="post-metadata">

### Author: ![seedrick](https://forum.yunohost.org/user_avatar/forum.yunohost.org/seedrick/32/3672_2.png) [@seedrick](https://forum.yunohost.org/u/seedrick)
#### Post date: [January 18, 2023, 10:51pm UTC](https://forum.yunohost.org/t/ldap-access-from-external-jellyfin/22925/5 "2023-01-18T22:51:11Z")

</div>

I’m referring to the LDAP permissions. All the LDAP permissions came from the app install, I just want to make sure they’ll persist if I uninstall the app.

---

<div class="post-metadata">

### Author: ![tituspijean](https://forum.yunohost.org/user_avatar/forum.yunohost.org/tituspijean/32/3584_2.png) [@tituspijean](https://forum.yunohost.org/u/tituspijean)
#### Post date: [January 19, 2023, 9:34pm UTC](https://forum.yunohost.org/t/ldap-access-from-external-jellyfin/22925/6 "2023-01-19T21:34:42Z")

</div>

Ah I see. Indeed deleting the app on your YunoHost server will delete the permissions across the LDAP server. To keep them after app removal, you will need to recreate them. In a new terminal:

```auto
sudo su
bash
source /usr/share/yunohost/helpers
app=jellyfin
ynh_permission_create --permission="admin" --label="Jellyfin external admins" --show_tile=false

```

Untested, but should work. You can give this permission to any YunoHost user or group from the webadmin.  
You won’t be able to install Jellyfin on that server as long as the permission exists. To delete it:

```auto
sudo su
bash
source /usr/share/yunohost/helpers
app=jellyfin
ynh_permission_delete --permission="admin"

```

---

<div class="post-metadata">

### Author: ![system](https://forum.yunohost.org/uploads/default/original/2X/f/f59fe8e3ee6b100b4f574d30d6e30479c68b89f0.png) [@system](https://forum.yunohost.org/u/system)
#### Post date: [February 18, 2023, 9:35pm UTC](https://forum.yunohost.org/t/ldap-access-from-external-jellyfin/22925/7 "2023-02-18T21:35:41Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
