Inactive [SEC] xAuth v2.0.10 - Extra Authentication [1.2.5-R1.3+]

xAuth v2.0.10 - (CraftBukkit build: [1.2.5-R1.3+])
Download v2.0.10

lycano is taking over the development of xAuth as I no longer have the time nor the will to continue working on it. Please see the BukkitDev page: http://dev.bukkit.org/server-mods/xauth/

Thanks to everyone who has showed support for me and xAuth over the past 17 months. It's been 'fun'. If for any reason you need to contact me, stop by my IRC channel (irc.rizon.net #LoveDespite) or toss me a message at http://love-despite.com/forum. Until we meet again, stay gold. Bang.

------------------------------------------------------------------​

xAuth is a plugin designed with a single task in mind: protect a server and its players while running in offline-mode. The basic idea of this protection is allowing players to register an account based on their player name and a supplied password. When a registered player connects to the server, that player will be prompted to authenticate his or herself by logging in. If and only if a valid password is supplied, they will regain full control of their account until their session expires.

Video Tutorial | Commands & Permissions | Configuration | Messages | Translations | Source | Donate!​

Features

• Before registering/logging in, players cannot:
  • Chat, execute commands, interact with objects (levers, chests, etc.), move, or pickup items.
  • Break or place blocks
  • Receive or give damage, be targeted (followed) by hostile mobs
• Inventory and location protection
• In-depth setting and message configuration
• Persistent login sessions through server restarts
• Player name filter and password complexity configuration
• Kick non-logged in (but registered) players after a configurable amount of time
• Bukkit Permissions support
• Kick or temporarily lockout the IP address of a player who fails to log in after a configurable amount of tries
• Custom, highly secure password hashing
• H2 and MySQL support
• Authentication over URL (AuthURL) allows for connection to forum or website databases

Changelog (click for full changelog)

• Version 2.0.10
  • [Fixed] Exploit to completely bypass login system.
  • [Fixed] xAuth commands not working with Rcon
  • [Fixed] Exploiting login system to avoid fire & drowning damage.
  • [Fixed] NPE caused by player connecting & disconnecting during same server tick.
  • [Fixed] 'Table "SESSIONS" not found' error when a player uses /logout while session length is set to zero.
  • [Fixed] Exploiting location protection after dieing to return to the spot of death.
• Version 2.0.9
  • Added several reverse single session configuration options.
  • Fixed registration.forced: false not working.
  • Updated version check and H2 download links.

xAuth Importer
xAuth Importer is a tool used to import accounts from previous versions of xAuth as well as other authentication plugins. Click here for more information.

 

Cant use it. /register works, but i cant force users to register. I checked config.yml, but still not work.
Please
help

~~ redpois0n

 

Work with 1.5 ?

 

If you're using Permissions or GroupManager make sure the group(s) you want to have to register don't have 'xauth.exclude'. Any groups with '*' also require adding '-xauth.exclude' (yes, with the hyphen) to force them to register.

 

Thanks for your plugin man. It is cool.

Between, it's a security plugin and... "xauth.exclude" is a security hole, isn't it ? (just joking)

Cheers.

++

PS: I love 512-bit Whirlpool hashes ! Not crappy MD5 algo.

 

I dont get it.

So i will add '-xauth.exclude' in permissions?

nah, wont work

EDIT by Moderator: merged posts, please use the edit button instead of double posting.

 

What other plugins do you have installed? It might be conflicting with one of them.

 

Ive got very many, but do you think it is Guestprev?

 

Alright, here's one for ya... They just released Bukkit, Build 689 about an hour ago... and the only plugin that broke is this one 0_0.
Keeping in mind that Build 689 has full support for v1.5 (yay!)

Code:

2011-04-21 05:39:53 [SEVERE] net.minecraft.server.PropertyManager.a(Ljava/lang/String;Z)Z loading xAuth v1.2.2 (Is it up to date?)
java.lang.NoSuchMethodError: net.minecraft.server.PropertyManager.a(Ljava/lang/String;Z)Z
    at com.cypherx.xauth.xAuth.onEnable(xAuth.java:71)
    at org.bukkit.plugin.java.JavaPlugin.setEnabled(JavaPlugin.java:127)
    at org.bukkit.plugin.java.JavaPluginLoader.enablePlugin(JavaPluginLoader.java:584)
    at org.bukkit.plugin.SimplePluginManager.enablePlugin(SimplePluginManager.java:218)
    at org.bukkit.craftbukkit.CraftServer.loadPlugin(CraftServer.java:115)
    at org.bukkit.craftbukkit.CraftServer.loadPlugins(CraftServer.java:93)
    at net.minecraft.server.MinecraftServer.e(MinecraftServer.java:217)
    at net.minecraft.server.MinecraftServer.a(MinecraftServer.java:204)
    at net.minecraft.server.MinecraftServer.init(MinecraftServer.java:144)
    at net.minecraft.server.MinecraftServer.run(MinecraftServer.java:259)
    at net.minecraft.server.ThreadServerApplication.run(SourceFile:394)

Anyways, thought this might help guide you through the journey to 1.5.

 

@L24D: it isn't even anounced in the news section xD

@CyperX: if this is true isn't it weired that this method flipped? :3 I wonder if it is now prop.b instead of a ^^

 

Code:

2011-04-22 01:47:56 [SEVERE] net.minecraft.server.PropertyManager.a(Ljava/lang/String;Z)Z loading xAuth v1.2.2 (Is it up to date?)
java.lang.NoSuchMethodError: net.minecraft.server.PropertyManager.a(Ljava/lang/String;Z)Z
    at com.cypherx.xauth.xAuth.onEnable(xAuth.java:71)
    at org.bukkit.plugin.java.JavaPlugin.setEnabled(JavaPlugin.java:127)
    at org.bukkit.plugin.java.JavaPluginLoader.enablePlugin(JavaPluginLoader.java:584)
    at org.bukkit.plugin.SimplePluginManager.enablePlugin(SimplePluginManager.java:218)
    at org.bukkit.craftbukkit.CraftServer.loadPlugin(CraftServer.java:115)
    at org.bukkit.craftbukkit.CraftServer.loadPlugins(CraftServer.java:93)
    at net.minecraft.server.MinecraftServer.e(MinecraftServer.java:217)
    at net.minecraft.server.MinecraftServer.a(MinecraftServer.java:204)
    at net.minecraft.server.MinecraftServer.init(MinecraftServer.java:144)
    at net.minecraft.server.MinecraftServer.run(MinecraftServer.java:259)
    at net.minecraft.server.ThreadServerApplication.run(SourceFile:394)

 

@Nieksas: That is exactly the same as L24D posted. And it is currently the same source of the problem if you dont stay at CB684 MCv1.4.

xAuth is disabling iteself if your server is running in online-mode. This check is done after each server start or relaod but it shouldn't matter.

Besides only use the recommended builds and stay on MC1.4 for a while as announced by the bukkit team (See the news page for further details). MC1.5. is currently updated most likely each day as there are many bugs in MC1.5 present. E.g. logic gates not responding after a while. This said every day something could change and you will be lost in space if you try snapshots!

(Topic: Compatible with 612 up to 684)

 

1.5 support please

 

@spunkiie: nah this isnt funny any longer x.x ask the bukkit team how many requests the had yesturday (and counting)

 

@lycano

bukkit already supports 1.5 mate

 

@spunkiie: and where did you find the announcment stated as recommended build? Dont find one? Hmmm x.x
It is currently under heavy development.

 

support 1.5 please thank =D

 

Well, if you REALLY want 1.5 support, why don't you read... just about 2 posts above? And if you're that desperate, why don't you make a nice, stable CB build for us?

 

newest version of bukkit are pretty stable and all of the plugins are working but not this.

 

It doesn't work with bukkit 689. Support please!

 

why don´t you first try to update to 699?

 

No. ask wikipedia why not, I can't explain you clearly.

 

I'm not updating until a new recommended build is promoted. The reason should be obvious to anyone who has read this thread.

 

why not? All other plugins works with build 698 without changing anythying. Only authoryzation plugins (your and others), wchich works is unavailable.

 

I use a CraftBukkit method to check if the server is running in online-mode.

Code:

PropertyManager props = new PropertyManager(new File("server.properties"));
if (props.a("online-mode", true))
 {
    System.out.println("[" + pdfFile.getName() + "] Stopping - Server is running in online-mode");
    this.setEnabled(false);
    this.getServer().getPluginManager().disablePlugin(this);
    return;
}

When CraftBukkit updates to support a new version of Minecraft, the a() method usually always changes to another letter. I'm waiting for a new recommend build to be completely sure it doesn't change again resulting in another update having to be made.

I wouldn't say ALL other plugins work, a vast majority do but any that use CraftBukkit methods most likely have to update as well.

 

just update allready because all plugins are working but not yours

 

Same here, I have roughly 20 plugins running on build 703 that are all working fine except for this plugin. It is a great plugin and without it my server is toast.

 

can you come with a quick fix? Don't edit the first post yet, just post it here and when the recommended build comes out, you can update the first post.

 

Just found out that a way to get a server property without directly calling a built-in Minecraft method was implemented yesterday. Testing now, expect an update within 10 minutes.

 

yay good job

 

Great news! thank you very much