Inactive [SEC] xAuth v2.0.10 - Extra Authentication [1.2.5-R1.3+]

Discussion in 'Inactive/Unsupported Plugins' started by CypherX, Mar 15, 2011.

Thread Status:
Not open for further replies.
  1. Offline

    CypherX

    xAuth v2.0.10 - (CraftBukkit build: [1.2.5-R1.3+])
    Download v2.0.10

    lycano is taking over the development of xAuth as I no longer have the time nor the will to continue working on it. Please see the BukkitDev page: http://dev.bukkit.org/server-mods/xauth/

    Thanks to everyone who has showed support for me and xAuth over the past 17 months. It's been 'fun'. If for any reason you need to contact me, stop by my IRC channel (irc.rizon.net #LoveDespite) or toss me a message at http://love-despite.com/forum. Until we meet again, stay gold. Bang.

    ------------------------------------------------------------------​

    xAuth is a plugin designed with a single task in mind: protect a server and its players while running in offline-mode. The basic idea of this protection is allowing players to register an account based on their player name and a supplied password. When a registered player connects to the server, that player will be prompted to authenticate his or herself by logging in. If and only if a valid password is supplied, they will regain full control of their account until their session expires.


    Features
    • Before registering/logging in, players cannot:
      • Chat, execute commands, interact with objects (levers, chests, etc.), move, or pickup items.
      • Break or place blocks
      • Receive or give damage, be targeted (followed) by hostile mobs
    • Inventory and location protection
    • In-depth setting and message configuration
    • Persistent login sessions through server restarts
    • Player name filter and password complexity configuration
    • Kick non-logged in (but registered) players after a configurable amount of time
    • Bukkit Permissions support
    • Kick or temporarily lockout the IP address of a player who fails to log in after a configurable amount of tries
    • Custom, highly secure password hashing
    • H2 and MySQL support
    • Authentication over URL (AuthURL) allows for connection to forum or website databases
    Changelog (click for full changelog)
    • Version 2.0.10
      • [Fixed] Exploit to completely bypass login system.
      • [Fixed] xAuth commands not working with Rcon
      • [Fixed] Exploiting login system to avoid fire & drowning damage.
      • [Fixed] NPE caused by player connecting & disconnecting during same server tick.
      • [Fixed] 'Table "SESSIONS" not found' error when a player uses /logout while session length is set to zero.
      • [Fixed] Exploiting location protection after dieing to return to the spot of death.
    • Version 2.0.9
      • Added several reverse single session configuration options.
      • Fixed registration.forced: false not working.
      • Updated version check and H2 download links.
    xAuth Importer
    xAuth Importer is a tool used to import accounts from previous versions of xAuth as well as other authentication plugins. Click here for more information.
     
  2. Offline

    Luwiego

    I get an error :/ If anynone tries to register it says "Something gone wrong while creating your account"
    Code:
    [SEVERE] [xAuth] Could not check account count for ip: xx.xxx.xxx.xxx
    com.mysql.jdbc.exceptions.jdbc4.MySQLSyntaxErrorException: Table 'mc_xauth.accounts' doesn't exist
            at sun.reflect.GeneratedConstructorAccessor27.newInstance(Unknown Source)
            at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:27)
            at java.lang.reflect.Constructor.newInstance(Constructor.java:513)
            at com.mysql.jdbc.Util.handleNewInstance(Util.java:407)
            at com.mysql.jdbc.Util.getInstance(Util.java:382)
            at com.mysql.jdbc.SQLError.createSQLException(SQLError.java:1052)
            at com.mysql.jdbc.MysqlIO.checkErrorPacket(MysqlIO.java:3593)
            at com.mysql.jdbc.MysqlIO.checkErrorPacket(MysqlIO.java:3525)
            at com.mysql.jdbc.MysqlIO.sendCommand(MysqlIO.java:1986)
            at com.mysql.jdbc.MysqlIO.sqlQueryDirect(MysqlIO.java:2140)
            at com.mysql.jdbc.ConnectionImpl.execSQL(ConnectionImpl.java:2626)
            at com.mysql.jdbc.PreparedStatement.executeInternal(PreparedStatement.java:2111)
            at com.mysql.jdbc.PreparedStatement.executeQuery(PreparedStatement.java:2273)
            at com.cypherx.xauth.auth.AuthSQL.isWithinAccLimit(AuthSQL.java:194)
            at com.cypherx.xauth.auth.AuthSQL.register(AuthSQL.java:54)
            at com.cypherx.xauth.commands.RegisterCommand.onCommand(RegisterCommand.java:37)
            at org.bukkit.command.PluginCommand.execute(PluginCommand.java:40)
            at org.bukkit.command.SimpleCommandMap.dispatch(SimpleCommandMap.java:166)
            at org.bukkit.craftbukkit.CraftServer.dispatchCommand(CraftServer.java:469)
            at net.minecraft.server.NetServerHandler.handleCommand(NetServerHandler.java:906)
            at net.minecraft.server.NetServerHandler.chat(NetServerHandler.java:866)
            at net.minecraft.server.NetServerHandler.a(NetServerHandler.java:849)
            at net.minecraft.server.Packet3Chat.handle(Packet3Chat.java:33)
            at net.minecraft.server.NetworkManager.b(NetworkManager.java:229)
            at net.minecraft.server.NetServerHandler.a(NetServerHandler.java:116)
            at net.minecraft.server.NetworkListenThread.a(NetworkListenThread.java:78)
            at net.minecraft.server.MinecraftServer.w(MinecraftServer.java:554)
            at net.minecraft.server.MinecraftServer.run(MinecraftServer.java:452)
            at net.minecraft.server.ThreadServerApplication.run(SourceFile:490)
    14:49:53 [SEVERE] [xAuth] Something went wrong while creating account for player: Luwiego
    com.mysql.jdbc.exceptions.jdbc4.MySQLSyntaxErrorException: Table 'mc_xauth.accounts' doesn't exist
            at sun.reflect.GeneratedConstructorAccessor27.newInstance(Unknown Source)
            at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:27)
            at java.lang.reflect.Constructor.newInstance(Constructor.java:513)
            at com.mysql.jdbc.Util.handleNewInstance(Util.java:407)
            at com.mysql.jdbc.Util.getInstance(Util.java:382)
            at com.mysql.jdbc.SQLError.createSQLException(SQLError.java:1052)
            at com.mysql.jdbc.MysqlIO.checkErrorPacket(MysqlIO.java:3593)
            at com.mysql.jdbc.MysqlIO.checkErrorPacket(MysqlIO.java:3525)
            at com.mysql.jdbc.MysqlIO.sendCommand(MysqlIO.java:1986)
            at com.mysql.jdbc.MysqlIO.sqlQueryDirect(MysqlIO.java:2140)
            at com.mysql.jdbc.ConnectionImpl.execSQL(ConnectionImpl.java:2626)
            at com.mysql.jdbc.PreparedStatement.executeInternal(PreparedStatement.java:2111)
            at com.mysql.jdbc.PreparedStatement.executeUpdate(PreparedStatement.java:2407)
            at com.mysql.jdbc.PreparedStatement.executeUpdate(PreparedStatement.java:2325)
            at com.mysql.jdbc.PreparedStatement.executeUpdate(PreparedStatement.java:2310)
            at com.cypherx.xauth.PlayerManager.createAccount(PlayerManager.java:286)
            at com.cypherx.xauth.auth.AuthSQL.execRegQuery(AuthSQL.java:79)
            at com.cypherx.xauth.auth.AuthSQL.register(AuthSQL.java:65)
            at com.cypherx.xauth.commands.RegisterCommand.onCommand(RegisterCommand.java:37)
            at org.bukkit.command.PluginCommand.execute(PluginCommand.java:40)
            at org.bukkit.command.SimpleCommandMap.dispatch(SimpleCommandMap.java:166)
            at org.bukkit.craftbukkit.CraftServer.dispatchCommand(CraftServer.java:469)
            at net.minecraft.server.NetServerHandler.handleCommand(NetServerHandler.java:906)
            at net.minecraft.server.NetServerHandler.chat(NetServerHandler.java:866)
            at net.minecraft.server.NetServerHandler.a(NetServerHandler.java:849)
            at net.minecraft.server.Packet3Chat.handle(Packet3Chat.java:33)
            at net.minecraft.server.NetworkManager.b(NetworkManager.java:229)
            at net.minecraft.server.NetServerHandler.a(NetServerHandler.java:116)
            at net.minecraft.server.NetworkListenThread.a(NetworkListenThread.java:78)
            at net.minecraft.server.MinecraftServer.w(MinecraftServer.java:554)
            at net.minecraft.server.MinecraftServer.run(MinecraftServer.java:452)
            at net.minecraft.server.ThreadServerApplication.run(SourceFile:490)
    >
    
    NEVERMIND ! Fixed myself :) But if anyone has this problem, delete DBVERSION in your xauth folder ;)
     
  3. Offline

    Krazy

    @CypherX
    Code:
    2012-03-19 09:05:39 [SEVERE] null
    org.bukkit.command.CommandException: Unhandled exception executing command 'l' in plugin xAuth v2.0.2
        at org.bukkit.command.PluginCommand.execute(PluginCommand.java:42)
        at org.bukkit.command.SimpleCommandMap.dispatch(SimpleCommandMap.java:166)
        at org.bukkit.craftbukkit.CraftServer.dispatchCommand(CraftServer.java:469)
        at net.minecraft.server.NetServerHandler.handleCommand(NetServerHandler.java:907)
        at net.minecraft.server.NetServerHandler.chat(NetServerHandler.java:867)
        at net.minecraft.server.NetServerHandler.a(NetServerHandler.java:850)
        at org.getspout.spout.SpoutNetServerHandler.a(SpoutNetServerHandler.java:103)
        at net.minecraft.server.Packet3Chat.handle(Packet3Chat.java:33)
        at net.minecraft.server.NetworkManager.b(NetworkManager.java:229)
        at net.minecraft.server.NetServerHandler.a(NetServerHandler.java:116)
        at org.getspout.spout.SpoutNetServerHandler.a(SpoutNetServerHandler.java:169)
        at net.minecraft.server.NetworkListenThread.a(NetworkListenThread.java:78)
        at net.minecraft.server.MinecraftServer.w(MinecraftServer.java:554)
        at net.minecraft.server.MinecraftServer.run(MinecraftServer.java:452)
        at net.minecraft.server.ThreadServerApplication.run(SourceFile:490)
    Caused by: java.lang.NullPointerException
        at org.bukkit.craftbukkit.entity.CraftPlayer.teleport(CraftPlayer.java:358)
        at org.bukkit.craftbukkit.entity.CraftEntity.teleport(CraftEntity.java:167)
        at com.cypherx.xauth.PlayerDataHandler.restoreData(PlayerDataHandler.java:203)
        at com.cypherx.xauth.PlayerManager.unprotect(PlayerManager.java:173)
        at com.cypherx.xauth.PlayerManager.doLogin(PlayerManager.java:262)
        at com.cypherx.xauth.commands.LoginCommand.onCommand(LoginCommand.java:40)
        at org.bukkit.command.PluginCommand.execute(PluginCommand.java:40)
        ... 14 more
    Code:
    2012-03-19 09:05:05 [SEVERE] null
    org.bukkit.command.CommandException: Unhandled exception executing command 'login' in plugin xAuth v2.0.2
        at org.bukkit.command.PluginCommand.execute(PluginCommand.java:42)
        at org.bukkit.command.SimpleCommandMap.dispatch(SimpleCommandMap.java:166)
        at org.bukkit.craftbukkit.CraftServer.dispatchCommand(CraftServer.java:469)
        at net.minecraft.server.NetServerHandler.handleCommand(NetServerHandler.java:907)
        at net.minecraft.server.NetServerHandler.chat(NetServerHandler.java:867)
        at net.minecraft.server.NetServerHandler.a(NetServerHandler.java:850)
        at org.getspout.spout.SpoutNetServerHandler.a(SpoutNetServerHandler.java:103)
        at net.minecraft.server.Packet3Chat.handle(Packet3Chat.java:33)
        at net.minecraft.server.NetworkManager.b(NetworkManager.java:229)
        at net.minecraft.server.NetServerHandler.a(NetServerHandler.java:116)
        at org.getspout.spout.SpoutNetServerHandler.a(SpoutNetServerHandler.java:169)
        at net.minecraft.server.NetworkListenThread.a(NetworkListenThread.java:78)
        at net.minecraft.server.MinecraftServer.w(MinecraftServer.java:554)
        at net.minecraft.server.MinecraftServer.run(MinecraftServer.java:452)
        at net.minecraft.server.ThreadServerApplication.run(SourceFile:490)
    Caused by: java.lang.NullPointerException
        at org.bukkit.craftbukkit.entity.CraftPlayer.teleport(CraftPlayer.java:358)
        at org.bukkit.craftbukkit.entity.CraftEntity.teleport(CraftEntity.java:167)
        at com.cypherx.xauth.PlayerDataHandler.restoreData(PlayerDataHandler.java:203)
        at com.cypherx.xauth.PlayerManager.unprotect(PlayerManager.java:173)
        at com.cypherx.xauth.PlayerManager.doLogin(PlayerManager.java:262)
        at com.cypherx.xauth.commands.LoginCommand.onCommand(LoginCommand.java:40)
        at org.bukkit.command.PluginCommand.execute(PluginCommand.java:40)
        ... 14 more
    player nick:SubZer0o_
     
  4. Offline

    CypherX

    I don't know if you're all illiterate or just refuse to read, but it's getting old.
     
  5. Offline

    Krazy

    Done. https://github.com/CypherX/xAuth/issues/64
    and srry.

    @CypherX

    how to fix CONNECT FROM ANOTHER LOCATION BUG?
    my players lost itens -.-



    EDIT by Moderator: merged posts, please use the edit button instead of double posting.
     
    Last edited by a moderator: Jul 17, 2016
  6. Offline

    CombatWiZ

    Since this plugin is now updated, will it perform better then AuthMe in security measures? Meaning is it possible for "hackers" to somehow crack my players passwords? Or even mine?
     
  7. Offline

    CypherX

    Only if said passwords are weak and/or easily guessed.
     
  8. Offline

    Cheatman05

    Thank you, thank you, thank you, that's working again!!!! Thank you CypherX!!! :D
     
  9. Offline

    aron123

    How can I import data from AuthMe?
     
  10. Offline

    winter4w

    I think the h2 is outdated how do i update it
     
  11. Offline

    skiba

    maybe someone can do tutorial in youtube how to upgrade mysql to mysql
     
  12. Offline

    winter4w

    On the settings I ave it at H2SQL that was what it was last time unless it got change
     
  13. Offline

    vandariwii

    Is there an option to disable password hashing? If not could you please add that option in a future version?
    BTW, Awesome plugin!
     
  14. Offline

    CypherX

    No. Stop trying to steal your players passwords.
     
  15. Offline

    vandariwii

    LOL you read my mind, sorry man. :) Thanks for the support. If you need a website or anything (design) I can make you one. Because I don't have a credit card to donate. That would be my way of saying thanks for this great plugin.
     
  16. Offline

    winter4w

    Here is the error i get :O

    Code:
    20.03 04:02:01 [Server] INFO [xAuth] Disabling xAuth v2.0
    20.03 04:02:01 [Server] SEVERE [xAuth] Failed to establish MySQL server connection!
    20.03 04:02:01 [Server] INFO    at net.minecraft.server.ThreadServerApplication.run(SourceFile:490)
    20.03 04:02:01 [Server] INFO    at net.minecraft.server.MinecraftServer.run(MinecraftServer.java:425)
    20.03 04:02:01 [Server] INFO    at net.minecraft.server.MinecraftServer.init(MinecraftServer.java:187)
    20.03 04:02:01 [Server] INFO    at net.minecraft.server.MinecraftServer.a(MinecraftServer.java:361)
    20.03 04:02:01 [Server] INFO    at net.minecraft.server.MinecraftServer.t(MinecraftServer.java:374)
    20.03 04:02:01 [Server] INFO    at org.bukkit.craftbukkit.CraftServer.enablePlugins(CraftServer.java:232)
    20.03 04:02:01 [Server] INFO    at org.bukkit.craftbukkit.CraftServer.loadPlugin(CraftServer.java:250)
    20.03 04:02:01 [Server] INFO    at org.bukkit.plugin.SimplePluginManager.enablePlugin(SimplePluginManager.java:363)
    20.03 04:02:01 [Server] INFO    at org.bukkit.plugin.java.JavaPluginLoader.enablePlugin(JavaPluginLoader.java:336)
    20.03 04:02:01 [Server] INFO    at org.bukkit.plugin.java.JavaPlugin.setEnabled(JavaPlugin.java:215)
    20.03 04:02:01 [Server] INFO    at com.cypherx.xauth.xAuth.onEnable(xAuth.java:58)
    20.03 04:02:01 [Server] INFO    at com.cypherx.xauth.database.DatabaseController.isConnectable(DatabaseController.java:63)
    20.03 04:02:01 [Server] INFO    at com.cypherx.xauth.database.DatabaseController.getConnection(DatabaseController.java:74)
    20.03 04:02:01 [Server] INFO    at com.cypherx.xauth.database.ConnectionPool.leaseConn(ConnectionPool.java:43)
    20.03 04:02:01 [Server] INFO    at java.sql.DriverManager.getConnection(DriverManager.java:200)
    20.03 04:02:01 [Server] INFO    at java.sql.DriverManager.getConnection(DriverManager.java:620)
    20.03 04:02:01 [Server] INFO    at com.mysql.jdbc.NonRegisteringDriver.connect(NonRegisteringDriver.java:305)
    20.03 04:02:01 [Server] INFO    at com.mysql.jdbc.ConnectionImpl.getInstance(ConnectionImpl.java:378)
    20.03 04:02:01 [Server] INFO    at com.mysql.jdbc.Util.handleNewInstance(Util.java:407)
    20.03 04:02:01 [Server] INFO    at java.lang.reflect.Constructor.newInstance(Constructor.java:532)
    20.03 04:02:01 [Server] INFO    at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)
    20.03 04:02:01 [Server] INFO    at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:57)
    20.03 04:02:01 [Server] INFO    at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
    20.03 04:02:01 [Server] INFO    at com.mysql.jdbc.JDBC4Connection.<init>(JDBC4Connection.java:47)
    20.03 04:02:01 [Server] INFO    at com.mysql.jdbc.ConnectionImpl.<init>(ConnectionImpl.java:794)
    20.03 04:02:01 [Server] INFO    at com.mysql.jdbc.ConnectionImpl.createNewIO(ConnectionImpl.java:2163)
    20.03 04:02:01 [Server] INFO    at com.mysql.jdbc.ConnectionImpl.connectOneTryOnly(ConnectionImpl.java:2371)
    20.03 04:02:01 [Server] INFO    at com.mysql.jdbc.ConnectionImpl.coreConnect(ConnectionImpl.java:2338)
    20.03 04:02:01 [Server] INFO    at com.mysql.jdbc.MysqlIO.doHandshake(MysqlIO.java:1296)
    20.03 04:02:01 [Server] INFO    at com.mysql.jdbc.MysqlIO.secureAuth411(MysqlIO.java:4031)
    20.03 04:02:01 [Server] INFO    at com.mysql.jdbc.MysqlIO.checkErrorPacket(MysqlIO.java:931)
    20.03 04:02:01 [Server] INFO    at com.mysql.jdbc.MysqlIO.checkErrorPacket(MysqlIO.java:3525)
    20.03 04:02:01 [Server] INFO    at com.mysql.jdbc.MysqlIO.checkErrorPacket(MysqlIO.java:3593)
    20.03 04:02:01 [Server] INFO    at com.mysql.jdbc.SQLError.createSQLException(SQLError.java:1073)
    20.03 04:02:01 [Server] INFO java.sql.SQLException: Access denied for user 'user'@'localhost' (using password: YES)
    20.03 04:02:01 [Server] SEVERE [xAuth] Failed to borrow MySQL connection from pool!
    20.03 04:02:01 [Server] INFO [xAuth] Permissions support enabled: PermissionsEx v1.19
    20.03 04:02:01 [Server] INFO [xAuth] Enabling xAuth v2.0
    When I looked on the config there is no way for me to use h2 how can I make it go on h2 and if I cant how can I make h2 to a mysql

    EDIT by Moderator: merged posts, please use the edit button instead of double posting.
     
    Last edited by a moderator: Jul 17, 2016
  17. Offline

    ChemicallyGodly

    I never said mine was a bug maybe i did something wrong. were do i post for help?
     
  18. Offline

    winter4w

    Ya someone found my password I was looking in the log and they typed it it was annoying
     
  19. Offline

    sharkale

    this bug is from previous version, now this glitch is "fixed".

    if someone find your password without exploit, is your fault. change you 1234 password next time.
     
    winter4w likes this.
  20. Offline

    RG_PankO

    What is the encription used for the passwords?
    On old xAuth it was md5 so I had a php script to insert the new user.
    I just inserted the username and then md5('password'), but now it doesnt work.

    Any help? winter4w CypherX

    All I want is to make a php file to insert my new users.
    So what cripting I have to use with php to insert the new pass, md5 isn't the one.
     
  21. Offline

    CypherX

    https://github.com/CypherX/xAuth/wiki/Password-Hashing

    $checkPass - Plaintext password the user has entered.
    $realPass - Hash from database for that user.
    $algorithm - Value of the `pwtype` field for that user.
     
  22. Offline

    columb

    Why you don't care about your plugin resource usage? It's critical! Server lagging as hell when someone is joining.
    https://github.com/CypherX/xAuth/issues/55
    Fix it ASAP, that's totally not okey.
    (And it's not cause I have shitty server with 16 gb ram and quad i7 with 3.6 ghz on Ubuntu server)
     
  23. Offline

    aehoooo

    Was the ingame command to stop registers removed? How do I do it?
     
  24. Offline

    sharkale

    Who you are to tell him what to do?
    And the "server lagging as hell" not happend to me.
    https://github.com/CypherX/xAuth/wiki/Commands-and-Permissions
     
  25. Offline

    CypherX

    Yes, the way the configuration was handled changed so that command wouldn't work any longer. As of right now you have to set 'registration.enabled' to false in the configuration then reload the server. A command to control the configuration may be re-added in the future.
     
  26. Offline

    aehoooo

    Oh, ok, thats a shame.
    Managing the server just became 10 times harder :(
     
  27. Offline

    RG_PankO

    CypherX thank you :)
    Solved my problem.
     
  28. Offline

    winter4w

    Umm I have issues so I cant really help this plugin isent working anymore because he removed h2 and I am wanting to know how I make it into a mysql

    My password wasent that

    EDIT by Moderator: merged posts, please use the edit button instead of double posting.
     
    Last edited by a moderator: Jul 17, 2016
  29. Offline

    djrazr

    Well.. seems like it doesnt create mysql tables... Would be nice to send atleat a .sql.. i dont wanna create that tables from errorcodes... table x doesn't exist.. field y doesnt exist...
     
  30. Offline

    winter4w

    Im gonna use AuthMe because I can convert it to a mysql file and xAuth dosent use H2 anymore
     
  31. Offline

    CypherX

    winter4w - You're fucking retarded.

     
    sharkale and aehoooo like this.
Thread Status:
Not open for further replies.

Share This Page