SOLVED: Lost admin account

[M N]

Uninstalling leaves information behind that you should remove.

Find the paths here: https://jellyfin.org/docs/general/admini...rver-paths

If you're not concerned about losing info, uninstall, remove that directory entirely, reinstall.

Another user I helped today edited their DB and nixed all of the users, which allowed them to set up a new admin account.

I’ll check the other directories, thank you! I certainly don’t mind losing info, I just got started with Jellyfin recently and I’m just using it as an open source alternative for home/travel use. However, DB edits seem like it would be the perfect solution to being sure it’s resolved - I just haven’t been able to figure it out. I’d very much appreciate help on that, too, if it worked for them.

[veleek]

This won't apply to everyone but hopefully it'll help a few people out.

I lost access to my admin account by enabling the SSO plugin -  9p4/jellyfin-plugin-sso: This plugin allows users to sign in through an SSO provider (such as Google, Microsoft, or your own provider). This enables one-click signin.

Signing in using the SSO method overwrote the user permissions on my account causing me to lose admin privs, even when re-signing in again using the original auth method (because the accounts were linked).  I had opted to not setup the user/admin role bindings during my initial setup of the SSO provider (PocketId in my case)

So, the fix: I could still get into the config files and was able to find the SSO plugin config at ./config/plugins/configurations/SSO-Auth.xml.  It had something like this:

Code:

        <PluginConfiguration>
          <OidEndpoint>https://id.example.com</OidEndpoint>
          <OidClientId>redacted</OidClientId>
          <OidSecret>redacted</OidSecret>
          <Enabled>true</Enabled>
          <EnableAuthorization>true</EnableAuthorization>
          <EnableAllFolders>true</EnableAllFolders>
          <EnabledFolders />
          <AdminRoles /> // <-- Empty!!
          <Roles />
          ...other stuff...

Since it's trivial for me to modify the configuration for PocketId, I ensured that my user was in at least one group, and then I updated the <AdminRoles/> element to 

Code:

          <AdminRoles>
            <string>my-admin-group-name</string>
          </AdminRoles>
          <Roles>
            <string>my-admin-group-name</string> // <--- This might not be necessary
          </Roles>

The next time I logged in, I was granted the admin role by way of the appropriate group and I could access the dashboard again.