SimpleServer / SimpleServer

A minecraft server tunnel.
https://github.com/SimpleServer/SimpleServer/wiki
MIT License
127 stars 40 forks source link

custAuth problem in 8.3.4 #180

Open tuxtard opened 13 years ago

tuxtard commented 13 years ago

When I try to login using custAuth on my server, I get this message "you can only use custAuth login if you are in offline mod" even though custAuth is enabled and onlineMode is set to false in the config file:

http://pastebin.com/CSC0wTf0

sk9c00 commented 12 years ago

Hmm, custAuth only works when you have pre-registered online, or with a legit nick-changer, then log on thru a hacked client or on offline mode then your username will become "Player[num]" Then you can use login...

sadimusi I would advise implementing something like AuthMe or ExAuth on Bukkit, I'm not sure if its possible though?..

The-PC-Tech-Guy commented 12 years ago

Yeah, it seems to only work if both the client AND server authentication is down. There were times that the server authentication system would be down, but not the client one, allowing clients to still possess the player's username.

dalbothek commented 12 years ago

To use custAuth you obviously have to enable onlineMode on the server. When you can't login with your client just click the Play offline button and you should be able to login with custAuth. You don't have to use any hacked or otherwise modified clients if you bought the game.

The-PC-Tech-Guy commented 12 years ago

No, the issue is rarely with the client, but rather the server authenticating the player (server-side authentication). This can happen if the Minecraft server-side authentication is down temporarily, or if the server has trouble connecting to the servers (due to overload, etc.)

The-PC-Tech-Guy commented 12 years ago

For example, this issue happened last night - I was able to log in with my profile, but the server authentication servers were down. This is why custAuth should work, regardless of profile name.

dalbothek commented 12 years ago

I think I finally understood what you want me to do. So, when you log in with your authenticated name but the server fails to check it's authenticity you are logged in as a guest instead of being kicked with a "Bad login" explanation. Is that it?

The-PC-Tech-Guy commented 12 years ago

Yeah, similar to that - although when the server has trouble communicating, it returns with a 502 error code (at least last night). You should be then logged in as a guest, and prompted to enter in the CustAuth password.

dola commented 12 years ago

If I remember correctly it should already do that... (or I did something wrong)^^

Edit: ok. it doesn't, but it shouldn't be too hard to implement this.

bryanburke commented 12 years ago

Is this issue fixed?