ombi header authentication | authentik | Page 1

broken abyss Mar 23, 2024, 3:38 AM

#

I am also wondering if anyone has header authentication working with ombi. I have tried the normal X-authentik-username with no luck.

My situation is a little different. I would like this to work for all my users even my admin user.
Here is currently how my setup is:

Most users are logged in through Plex, but I do have a few family members without their own plex accounts that I manually created accounts for in Authentik. I am trying to find a way to pass through header authentication for everyone, but seems to only work correctly for my manually created users. The Plex users information is the same across all apps that they use or access. The only thing that is different is the way they sign in. With all other apps they use the Authentik login to login to plex then authenticate and login to any other app. Ombi is the only one where users sign in to authentik with plex then sign in to ombi with plex again.

With the manually created users, I personally created their accounts on both authentik and ombi then emailed them the information along with a password reset link and strictly told them to change the passwords for both sites (authentik and ombi) to exactly the same passwords for SSO to work, which it does as expected.

My main issue is the plex users, and the manually created users together.

Can anyone help on this, as I am not too familiar with header authentication. If there is anyway I can get this to work for the plex users and then manipulate the manually created users to work with header authentication, I am ok with this too since there are not many manually created users. Any ideas or options are appreciated.

dire blade Mar 23, 2024, 5:08 PM

#

You dont need to change the password for orbi, infact you wouldnt even get to a login screen

#

the way it works for me is any new user who click on the appliction in authentik, an account gets created automatically in orbi, might have to go back and add the email manually but at least they log in to there profile

broken abyss Mar 23, 2024, 8:40 PM

#

I had all my plex users in Ombi before implementing Authentik. Would I have to remove them and have them login again after authentik is logged in?

dire blade Mar 23, 2024, 8:41 PM

#

I think they match by username so I would use the impersonate feature in authentik in incognito mode and see what profile your in.

#

If anything then yea just delete the users, log in using impersonate and just add in the emails later

broken abyss Mar 23, 2024, 8:43 PM

#

I have my setup verify by email instead of usernames, so I would prefer to use a header with the email if possible. My only issue with this is that my users already have a bunch of requests put into here. I do use a mysql database for Ombi, but I would like it if I could keep their current requests into this.

#

If it is possible I would like as much info filled into Ombi as possible without the users having to do too much to fix this, or me to fix this.

eager acorn Jan 10, 2025, 3:47 PM

#

@broken abyss do u mind sharing your authentik/nginx config

eager acorn Jan 13, 2025, 3:43 PM

#

anything?

broken abyss Jan 28, 2025, 5:34 PM

#

eager acorn <@603117011593068555> do u mind sharing your authentik/nginx config

Apologies, I didn't realize you had messaged, but I do not use NGINX or any other middle man, only Authentik. pretty basic setup for Ombi and Authentik. Ombi is currently using Plex Oauth to verify users so currently users have to login twice to get into Ombi.

eager acorn Jan 28, 2025, 5:41 PM

#

broken abyss Apologies, I didn't realize you had messaged, but I do not use NGINX or any othe...

ahhhh ok. so couldnt get the header authentication to work?

broken abyss Jan 30, 2025, 3:33 AM

#

I can get it to work but only if it is as a fresh install of ombi. I want to be able to use the header authentication with the current setup I have going and not lose any current user requests that are in my database for ombi.

broken abyss Jan 31, 2025, 5:50 PM

#

I just decided to say screw it and reinstall ombi from scratch.

eager acorn Jan 31, 2025, 11:26 PM

#

damn ok, i cant be bothered to reinstall ombi 😭

broken abyss Feb 1, 2025, 4:45 AM

#

When I reinstalled Ombi, it asked if I wanted to connect to a DB. I tried, but it wouldn't connect for some reason. It had me connect to the db. restart ombi, then try to reconnect and failed. I don't know. I still have the DB if I can figure out how to convert all the users over to header auth instead of using Plex OAuth on Ombi. My old Ombi setup had Plex OAuth as the authentication method, then I switched to Authentik and didn't want users to have to login two times just to get to Ombi. I couldn't figure out how to keep all users that were authenticated with Plex in Ombi to use Header Authentication without any issues. Maybe it just isn't possible, but either way it is out of my scope of knowledge.

dire blade Feb 2, 2025, 1:03 AM

#

So which part isn't working? I have mine working for a few years now and have no issue besides I cannot log out of Ombi to another account but besides that authentik logs users straight in. I did have to manually add there emails after they signed in

#ombi header authentication