Inactive [SEC] xAuth v2.0.10 - Extra Authentication [1.2.5-R1.3+]

Discussion in 'Inactive/Unsupported Plugins' started by CypherX, Mar 15, 2011.

Thread Status:
Not open for further replies.
  1. Offline


    xAuth v2.0.10 - (CraftBukkit build: [1.2.5-R1.3+])
    Download v2.0.10

    lycano is taking over the development of xAuth as I no longer have the time nor the will to continue working on it. Please see the BukkitDev page:

    Thanks to everyone who has showed support for me and xAuth over the past 17 months. It's been 'fun'. If for any reason you need to contact me, stop by my IRC channel ( #LoveDespite) or toss me a message at Until we meet again, stay gold. Bang.


    xAuth is a plugin designed with a single task in mind: protect a server and its players while running in offline-mode. The basic idea of this protection is allowing players to register an account based on their player name and a supplied password. When a registered player connects to the server, that player will be prompted to authenticate his or herself by logging in. If and only if a valid password is supplied, they will regain full control of their account until their session expires.

    • Before registering/logging in, players cannot:
      • Chat, execute commands, interact with objects (levers, chests, etc.), move, or pickup items.
      • Break or place blocks
      • Receive or give damage, be targeted (followed) by hostile mobs
    • Inventory and location protection
    • In-depth setting and message configuration
    • Persistent login sessions through server restarts
    • Player name filter and password complexity configuration
    • Kick non-logged in (but registered) players after a configurable amount of time
    • Bukkit Permissions support
    • Kick or temporarily lockout the IP address of a player who fails to log in after a configurable amount of tries
    • Custom, highly secure password hashing
    • H2 and MySQL support
    • Authentication over URL (AuthURL) allows for connection to forum or website databases
    Changelog (click for full changelog)
    • Version 2.0.10
      • [Fixed] Exploit to completely bypass login system.
      • [Fixed] xAuth commands not working with Rcon
      • [Fixed] Exploiting login system to avoid fire & drowning damage.
      • [Fixed] NPE caused by player connecting & disconnecting during same server tick.
      • [Fixed] 'Table "SESSIONS" not found' error when a player uses /logout while session length is set to zero.
      • [Fixed] Exploiting location protection after dieing to return to the spot of death.
    • Version 2.0.9
      • Added several reverse single session configuration options.
      • Fixed registration.forced: false not working.
      • Updated version check and H2 download links.
    xAuth Importer
    xAuth Importer is a tool used to import accounts from previous versions of xAuth as well as other authentication plugins. Click here for more information.
  2. Offline


    I keep getting this error constantly
     [xAuth] SQL query failure [write] (INSERT INTO `strikes` VALUES (?, ?, ?))
    org.h2.jdbc.JdbcSQLException: Column count does not match; SQL statement:
    INSERT INTO `strikes` VALUES (?, ?, ?) [21002-159]
    at org.h2.message.DbException.getJdbcSQLException(
    at org.h2.message.DbException.get(
    at org.h2.message.DbException.get(
    at org.h2.message.DbException.get(
    at org.h2.command.Parser.prepareCommand(
    at org.h2.command.dml.Insert.prepare(
    at org.h2.engine.Session.prepareLocal(
    at org.h2.engine.Session.prepareCommand(
    at org.h2.jdbc.JdbcConnection.prepareCommand(
    at org.h2.jdbc.JdbcPreparedStatement.<init>(
    at com.cypherx.xauth.database.Database.queryWrite(
    at com.cypherx.xauth.commands.LoginCommand.onCommand(
    at org.h2.jdbc.JdbcConnection.prepareStatement(
    at com.cypherx.xauth.database.DbUtil.insertStrike(
    at org.bukkit.command.PluginCommand.execute(
    at org.bukkit.command.SimpleCommandMap.dispatch(
    at org.bukkit.craftbukkit.CraftServer.dispatchCommand(
    at net.minecraft.server.NetServerHandler.handleCommand(
    at net.minecraft.server.Packet3Chat.a(
    at net.minecraft.server.NetServerHandler.a(
    at net.minecraft.server.NetworkManager.b(
    at net.minecraft.server.NetServerHandler.a(
    at net.minecraft.server.NetworkListenThread.a(SourceFile:108)
    at net.minecraft.server.MinecraftServer.h(
  3. Offline


    Hey.. I just had a quick question with the spawning. I have correctly set the location for unregistered and people who need to login using '/xauth location set', but when new players register they spawn about 10 blocks off the actual map spawn. I had a building for new players to spawn in, and I set the spawn using '/setspawn' (Commandbook) inside a room, but they spawn outside the building.

    Thanks in advance,
  4. Offline


    This might not be xauth related. Minecraft has a very picky spawn mechanic. I believe more recent versions of MCEdit will show you and fix the spawn for you when you move it. If you don't want to use MCEdit, then I don't know what the exact restrictions are for a spawn. You may need to be at a height of 64+ and I believe you cannot have blocks within 2 places above the spawn.
  5. Offline


    The plugin makes problems when is used with spout... it always says(when a player leave the server and then try to enter again) You are already online!
  6. Offline


    Alright, I'll check it out with MCEdit
  7. Offline


    Need backup???
  8. Offline


    Hey, not sure if this is a bug or what, but sometimes when I or my users log in, we're not teleported back to our previous location. Sometimes it does, other times it doesn't. Not quite sure why or how. All the settings, for the most part, should be default. Would using H2O as my database have anything to do with it? Should I switch to an actual mysql database?
  9. Offline


    Give us md5 support plz
  10. Offline


    Just to let you know for 1.0, when you get your items back after /register or /login, enchantements are removed
  11. Offline


    Aren't they always removed? I thought they always go away... If it's caused by xAuth, I'll be very angry, because I didn't know it was xAuth *grrrr*!
    Maybe I'll switch to AuthDB or something else. Maybe that works :)
  12. Can you do a tutoria for migrate Authme to xAuth?
  13. Offline


    Well, we need to wait until plugins autors of offline authentification update their plugins.

    It's due to the inventory protection when you join the server, the plugin only remember that you had a Diamond Sword for exemple, and when you successfully login, it gives you back a simple Diamond sword.
  14. Is there an email activation function within this plugin?
  15. Offline


    Is this version compatible with Minecraft 1.0.0 (new release) and CraftBukkit > 1464 (for Minecraft 1.0.0) ??
    (So can I ugrade my server to CraftBukkit 1464 without any problem with this plugin ?)
  16. Offline


    Is there a way already to save enchantments? Because I didn't see one yet, maybe I'm just blind :D

    It is compatible, but does not save enchantments, because it's not updated for this feature. Everything else works fine! Use it :D

    @Author: Pleeeease add enchantment saving or a configurable inventory-access. So you can enable or disable inventories for not logged in players. Pleeease!!!111! :D
  17. Offline


    Save Location also seems to be not working anymore.
  18. Offline


  19. Offline


    xAuth version: 2.0b4.3
    CraftBukkit build:1.0.0
    Description of error/bug:
    Any Player may now login to an admins account in a couple easy steps. (Please fix asap!! =( )
    Error log: The file is too big.... for me to upload it However I uploaded it to this post
    Other information: (Steps to reproduce or what you were doing when it occurred)This bug occurs when person(a) using MinecraftSP.Exe enters the server however does not login. When another guy person(b) (or maybe even the same person from the same computer) attempts to go on the same server with the same account. Person(a), still at the login screen will now be able to move using the same account after getting kicked automatically kicked by bukkit from "WALKING TO FAST" and recconecting. THIS IS A HUGE BUG as my accomplices logged in into my account and griefed the city.Realizing they had entered my account. I quickly tried to enter my account while HE was Oping everyone. Minutes later after Shutting down the server and turinging it back on I was able to login, noticing the city was covered in Lava. I needed to remove the lava and Deop eveyone who was op.

    Attached Files:

  20. Offline


    can you provide advanced autorization by ip, for ex: i have static ip, I authorize in game, change my method autorization by ip
  21. Offline


    Any way of changing this to md5 ?
  22. Offline


    I have updated the server version and some players are having an issue with login. They are receiving "wrong password" error. It only happens to random users, possibly some problem with hashing?

    I would be glad for any help.

    Bukkit 1222
    xAuth v2.0 (Beta 4.3)
  23. Offline


    @CypherX I know there's no RB yet for 1.0, but would it be possible to get an unofficial, no support, use at your own risk, beta update for CB #1518+? In the CB builds before 1518, there were changes involving enchants so maybe that's relevant to an update of this plugin so players don't lose their enchants when logging in?
  24. Offline


    I also agree with @GameFAQsRolo that you should make a 1.0.0 version, but now as there came a lot of things for enchanting (enchanting api and some fixes etc.) could you maybe implement saving enchanted items? Because that's reaaaally important to me!
    Greetings, NoNe aNd NoNly.
  25. Offline


    Hey, would it be possible to add permissions to the plugin?
    Would be nice to allow only a few players to register.
    Something like 'xauth.register' and 'xauth.login'.
  26. Offline


    Cool idea. I also think this should be added + saving of enchantments! :D
  27. Offline


    What's the point of that? Not to have to many users in DB ?
  28. Offline


  29. Offline


    Ah, ok.
    Only used when forced registration is disabled to specify which groups/players should register.
    But thats not what I mean, I want to enable login only for a specific usergroup, the other usergroups should be able to register and connect to the server, but not be able to login, so they will stuck at a position for ever.

    Jeah, I now that this sounds stupid. Forget it.
    Nevermind, great Plugin.
  30. Offline


    Ok how come people dot re-spawn where they were last they keep going to the spawn again
  31. Offline


    Hello! That's the problem when the server starts:

    [SEVERE] [xAuth] SQL query failure [read] (SELECT a.*, s.* FROM `accounts` a LEFT JOIN `sessions` s ON = s.accountid WHERE `playername` = ?)
    com.mysql.jdbc.exceptions.jdbc4.MySQLSyntaxErrorException: Table 'xAuth.accounts' doesn't exist
        at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
        at sun.reflect.NativeConstructorAccessorImpl.newInstance(
        at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(
        at java.lang.reflect.Constructor.newInstance(
        at com.mysql.jdbc.Util.handleNewInstance(
        at com.mysql.jdbc.Util.getInstance(
        at com.mysql.jdbc.SQLError.createSQLException(
        at com.mysql.jdbc.MysqlIO.checkErrorPacket(
        at com.mysql.jdbc.MysqlIO.checkErrorPacket(
        at com.mysql.jdbc.MysqlIO.sendCommand(
        at com.mysql.jdbc.MysqlIO.sqlQueryDirect(
        at com.mysql.jdbc.ConnectionImpl.execSQL(
        at com.mysql.jdbc.PreparedStatement.executeInternal(
        at com.mysql.jdbc.PreparedStatement.executeQuery(
        at com.cypherx.xauth.database.Database.queryRead(
        at com.cypherx.xauth.database.DbUtil.getPlayerFromDb(
        at com.cypherx.xauth.xAuth.getPlayer(
        at com.cypherx.xauth.xAuth.onDisable(
        at org.bukkit.plugin.SimplePluginManager.disablePlugin(
        at org.bukkit.plugin.SimplePluginManager.disablePlugins(
        at org.bukkit.craftbukkit.CraftServer.disablePlugins(
        at net.minecraft.server.MinecraftServer.stop(
    That config.yml:
        # Location of the MySQL server. Can be either a host name or IP address
        host: localhost
        # Port used by MySQL. Default is 3306
        port: 3306
        # User name used to connect to the MySQL server
        username: root
        # Password used to connect to the MySQL server
        password: *******
        # Name of the database that will be used by xAuth
        database: xAuth
        # Names of the tables xAuth will use to store data
            account: accounts
            session: sessions
            strike: strikes
            location: tele_locations
            inventory: inventory
    Other plugins is working, but xAuth does not. Can not create a table ? Why ?
    How do I fix it ?

    CraftBukkit 1137
    xAuth 2.0b4.3

    Partially solved the problem. The author could not give the SQL tables?
    The tables are loaded, but the tables strikes, inventory and tele_locations are not recorded data. Why?
Thread Status:
Not open for further replies.

Share This Page