Inactive [SEC] xAuth v2.0.10 - Extra Authentication [1.2.5-R1.3+]

Discussion in 'Inactive/Unsupported Plugins' started by CypherX, Mar 15, 2011.

Thread Status:
Not open for further replies.
  1. Offline

    CypherX

    xAuth v2.0.10 - (CraftBukkit build: [1.2.5-R1.3+])
    Download v2.0.10

    lycano is taking over the development of xAuth as I no longer have the time nor the will to continue working on it. Please see the BukkitDev page: http://dev.bukkit.org/server-mods/xauth/

    Thanks to everyone who has showed support for me and xAuth over the past 17 months. It's been 'fun'. If for any reason you need to contact me, stop by my IRC channel (irc.rizon.net #LoveDespite) or toss me a message at http://love-despite.com/forum. Until we meet again, stay gold. Bang.

    ------------------------------------------------------------------​

    xAuth is a plugin designed with a single task in mind: protect a server and its players while running in offline-mode. The basic idea of this protection is allowing players to register an account based on their player name and a supplied password. When a registered player connects to the server, that player will be prompted to authenticate his or herself by logging in. If and only if a valid password is supplied, they will regain full control of their account until their session expires.


    Features
    • Before registering/logging in, players cannot:
      • Chat, execute commands, interact with objects (levers, chests, etc.), move, or pickup items.
      • Break or place blocks
      • Receive or give damage, be targeted (followed) by hostile mobs
    • Inventory and location protection
    • In-depth setting and message configuration
    • Persistent login sessions through server restarts
    • Player name filter and password complexity configuration
    • Kick non-logged in (but registered) players after a configurable amount of time
    • Bukkit Permissions support
    • Kick or temporarily lockout the IP address of a player who fails to log in after a configurable amount of tries
    • Custom, highly secure password hashing
    • H2 and MySQL support
    • Authentication over URL (AuthURL) allows for connection to forum or website databases
    Changelog (click for full changelog)
    • Version 2.0.10
      • [Fixed] Exploit to completely bypass login system.
      • [Fixed] xAuth commands not working with Rcon
      • [Fixed] Exploiting login system to avoid fire & drowning damage.
      • [Fixed] NPE caused by player connecting & disconnecting during same server tick.
      • [Fixed] 'Table "SESSIONS" not found' error when a player uses /logout while session length is set to zero.
      • [Fixed] Exploiting location protection after dieing to return to the spot of death.
    • Version 2.0.9
      • Added several reverse single session configuration options.
      • Fixed registration.forced: false not working.
      • Updated version check and H2 download links.
    xAuth Importer
    xAuth Importer is a tool used to import accounts from previous versions of xAuth as well as other authentication plugins. Click here for more information.
     
  2. Offline

    redpois0n

    Cant use it. /register works, but i cant force users to register. I checked config.yml, but still not work.
    Please
    help :D

    ~~ redpois0n
     
  3. Offline

    yago_nfs_tm-91-

    Work with 1.5 ?
     
  4. Offline

    CypherX

    If you're using Permissions or GroupManager make sure the group(s) you want to have to register don't have 'xauth.exclude'. Any groups with '*' also require adding '-xauth.exclude' (yes, with the hyphen) to force them to register.
     
  5. Offline

    Ben91

    Thanks for your plugin man. It is cool.

    Between, it's a security plugin and... "xauth.exclude" is a security hole, isn't it ? :p (just joking)

    Cheers.

    ++

    PS: I love 512-bit Whirlpool hashes ! Not crappy MD5 algo. :)
     
  6. Offline

    redpois0n

    I dont get it.

    So i will add '-xauth.exclude' in permissions?

    nah, wont work

    EDIT by Moderator: merged posts, please use the edit button instead of double posting.
     
    Last edited by a moderator: May 12, 2016
  7. Offline

    CypherX

    What other plugins do you have installed? It might be conflicting with one of them.
     
  8. Offline

    redpois0n

    Ive got very many, but do you think it is Guestprev?
     
  9. Offline

    L24D

    Alright, here's one for ya... They just released Bukkit, Build 689 about an hour ago... and the only plugin that broke is this one 0_0.
    Keeping in mind that Build 689 has full support for v1.5 (yay!)

    Code:
    2011-04-21 05:39:53 [SEVERE] net.minecraft.server.PropertyManager.a(Ljava/lang/String;Z)Z loading xAuth v1.2.2 (Is it up to date?)
    java.lang.NoSuchMethodError: net.minecraft.server.PropertyManager.a(Ljava/lang/String;Z)Z
        at com.cypherx.xauth.xAuth.onEnable(xAuth.java:71)
        at org.bukkit.plugin.java.JavaPlugin.setEnabled(JavaPlugin.java:127)
        at org.bukkit.plugin.java.JavaPluginLoader.enablePlugin(JavaPluginLoader.java:584)
        at org.bukkit.plugin.SimplePluginManager.enablePlugin(SimplePluginManager.java:218)
        at org.bukkit.craftbukkit.CraftServer.loadPlugin(CraftServer.java:115)
        at org.bukkit.craftbukkit.CraftServer.loadPlugins(CraftServer.java:93)
        at net.minecraft.server.MinecraftServer.e(MinecraftServer.java:217)
        at net.minecraft.server.MinecraftServer.a(MinecraftServer.java:204)
        at net.minecraft.server.MinecraftServer.init(MinecraftServer.java:144)
        at net.minecraft.server.MinecraftServer.run(MinecraftServer.java:259)
        at net.minecraft.server.ThreadServerApplication.run(SourceFile:394)
    Anyways, thought this might help guide you through the journey to 1.5. :D
     
  10. Offline

    lycano

    @L24D: it isn't even anounced in the news section xD

    @CyperX: if this is true isn't it weired that this method flipped? :3 I wonder if it is now prop.b instead of a ^^
     
  11. Offline

    Nieksas

    Code:
    2011-04-22 01:47:56 [SEVERE] net.minecraft.server.PropertyManager.a(Ljava/lang/String;Z)Z loading xAuth v1.2.2 (Is it up to date?)
    java.lang.NoSuchMethodError: net.minecraft.server.PropertyManager.a(Ljava/lang/String;Z)Z
        at com.cypherx.xauth.xAuth.onEnable(xAuth.java:71)
        at org.bukkit.plugin.java.JavaPlugin.setEnabled(JavaPlugin.java:127)
        at org.bukkit.plugin.java.JavaPluginLoader.enablePlugin(JavaPluginLoader.java:584)
        at org.bukkit.plugin.SimplePluginManager.enablePlugin(SimplePluginManager.java:218)
        at org.bukkit.craftbukkit.CraftServer.loadPlugin(CraftServer.java:115)
        at org.bukkit.craftbukkit.CraftServer.loadPlugins(CraftServer.java:93)
        at net.minecraft.server.MinecraftServer.e(MinecraftServer.java:217)
        at net.minecraft.server.MinecraftServer.a(MinecraftServer.java:204)
        at net.minecraft.server.MinecraftServer.init(MinecraftServer.java:144)
        at net.minecraft.server.MinecraftServer.run(MinecraftServer.java:259)
        at net.minecraft.server.ThreadServerApplication.run(SourceFile:394)
    
     
  12. Offline

    lycano

    @Nieksas: That is exactly the same as L24D posted. And it is currently the same source of the problem if you dont stay at CB684 MCv1.4.

    xAuth is disabling iteself if your server is running in online-mode. This check is done after each server start or relaod but it shouldn't matter.

    Besides only use the recommended builds and stay on MC1.4 for a while as announced by the bukkit team (See the news page for further details). MC1.5. is currently updated most likely each day as there are many bugs in MC1.5 present. E.g. logic gates not responding after a while. This said every day something could change and you will be lost in space if you try snapshots!

    (Topic: Compatible with 612 up to 684)
     
  13. Offline

    spunkiie

    1.5 support please :D
     
  14. Offline

    lycano

    @spunkiie: nah this isnt funny any longer x.x ask the bukkit team how many requests the had yesturday (and counting)
     
  15. Offline

    spunkiie

    @lycano

    bukkit already supports 1.5 mate
     
  16. Offline

    lycano

    @spunkiie: and where did you find the announcment stated as recommended build? Dont find one? Hmmm x.x
    It is currently under heavy development.
     
  17. Offline

    jeremy10tie

    support 1.5 please thank =D
     
  18. Offline

    The PC Tech Guy

    Well, if you REALLY want 1.5 support, why don't you read... just about 2 posts above? And if you're that desperate, why don't you make a nice, stable CB build for us?
     
  19. Offline

    Nieksas

    newest version of bukkit are pretty stable and all of the plugins are working but not this.
     
  20. Offline

    PedroN041

    It doesn't work with bukkit 689. Support please!
     
  21. Offline

    pwnd

    why donĀ“t you first try to update to 699?
     
  22. Offline

    Unset

    No. ask wikipedia why not, I can't explain you clearly.
     
  23. Offline

    CypherX

    I'm not updating until a new recommended build is promoted. The reason should be obvious to anyone who has read this thread.
     
  24. Offline

    skyref

    why not? All other plugins works with build 698 without changing anythying. Only authoryzation plugins (your and others), wchich works is unavailable.
     
  25. Offline

    CypherX

    I use a CraftBukkit method to check if the server is running in online-mode.

    Code:
    PropertyManager props = new PropertyManager(new File("server.properties"));
    if (props.a("online-mode", true))
     {
        System.out.println("[" + pdfFile.getName() + "] Stopping - Server is running in online-mode");
        this.setEnabled(false);
        this.getServer().getPluginManager().disablePlugin(this);
        return;
    }
    When CraftBukkit updates to support a new version of Minecraft, the a() method usually always changes to another letter. I'm waiting for a new recommend build to be completely sure it doesn't change again resulting in another update having to be made.

    I wouldn't say ALL other plugins work, a vast majority do but any that use CraftBukkit methods most likely have to update as well.
     
  26. Offline

    Nieksas

    just update allready because all plugins are working but not yours
     
  27. Offline

    Walken

    Same here, I have roughly 20 plugins running on build 703 that are all working fine except for this plugin. It is a great plugin and without it my server is toast.
     
  28. Offline

    gumball3000

    can you come with a quick fix? Don't edit the first post yet, just post it here and when the recommended build comes out, you can update the first post.
     
  29. Offline

    CypherX

    Just found out that a way to get a server property without directly calling a built-in Minecraft method was implemented yesterday. Testing now, expect an update within 10 minutes.
     
  30. Offline

    Nieksas

    yay good job
     
  31. Offline

    Walken

    Great news! thank you very much
     
Thread Status:
Not open for further replies.

Share This Page