[SEC] Rakamak v2.0.0 - a plugin authentication [740]

Plugin now available and updated at:
http://forums.bukkit.org/threads/sec-rakamak-v3-1-0-a-plugin-authentication-860.20686/

Rakamak - The authentication plugin:
Version: v2.0.0

The Rakamak plugin has been created to provide a security opportunity for
servers with online-mode=false.

Cause I was in a particular network configurations with players accessing the
server by the Internet and others by the local Network without Internet access
I was encoutering lots of account stealing, particularly adminisatrators accounts
(oh? isn't it?).

The Rakamak plugin is a simple plugin which asks a password previously set up
by the player, before being able to do anything with his character.

It's my first plugin, so I probably have lots of things to learn, but it works...

Features:

• Set a password for each player
• Protect players from account stealing by asking it

Usage:

• /rakaset <thepasswordyouwant> to protect your character
• /rakapass <thesamepassword> to authenticate on login

Download:

Jar
Source Code

TODO:

• Re-enable players freezing
• Disable all commands but the login's one when not logged
• Permission support

Changelog:

Version 2.0.0

• Translated into English
• Removed useless BlockListener
• Added PlayerInteract event support
• Removed unlogged people freezing, now when a player didn't authenticate before quitting, the character is teleported to its original location.

Version 1.0

• First release of the plugin. Can still be downloaded here

 

IT SAYS: DATABASE DENIED OR SOMETHING CONTACT ADMIN. ????? HELLPPP?

 

I think you're not really using my plugin cause mine doesn't use database at all....

 

Is it possible to set this for only certain people, not all players, such as only admin accounts?

 

I'm thinking about it . But note that I don't have much time a the moment so the developpment goes.... slowly

 

Hi

Can I edit it to change:
/rakapass --> /register
and
/rakaset --> /login

 

Hum, without working on the source code, no. But you can download it on the github and just change it in the proper files. Then rebuild it (just make a jar with eclipse or netbeans) and you're done!

 

and whether you could do this to me?

When im use javac AccountsMgmt.java in cmd im have 6 errors. Ok im install NetBeans IDE 6.7.1 im not compile why?

 

Are passwords sent in the clear since you're using line command for authenticating users ?

 

Can you plz tell me how can we see the passwords of the registration that they do?
Because if they say that someone get their account we can see from when it had been changed the password..and what password was and what is..
Thnx!!

 

@canabix: Yes they're not ciphered, however I'm really thinking that it's irrevelant.

@vasil7112: you can see the passwords in the rakamak folder, but there aren't any other logs of players actions

 

Hello,

An update has been made by Dorpaxio, thanks to him, lots of claimed features has been implemented. I'm really sorry for not having so much time developping it by my own, but I have to take care of a server alone at the same time plus my real life, so it's quite difficult...

I'll post the update as soon as possible, Thanks to him, his name will be added in the main thread.

 

Plugin Updated !!!!!!!
Here :
( Temporary ) http://forums.bukkit.org/threads/sec-rakamak-v3-1-0-a-plugin-authentication-818.20686/

 

that means someone can sniff your password while you try to authenticate?

 

@canabix: that's always the case whatever plugin you will use cause your text isn't ciphered by bukkit. The only think I coul add is a ciphering before releasing the password in the rakamak passwords file, but I do not think that's usefull...

 

Just a message to notice everybody that the plugin is now available and updated at this link:

http://forums.bukkit.org/threads/sec-rakamak-v3-1-0-a-plugin-authentication-860.20686/