AuthMe Reloaded

Table of Contents

AuthMe

The most famous and used /login|/register plugin!

WARNING: if you want to try the newest features please use the latest dev build! (https://ci.codemc.org/job/AuthMe/job/AuthMeReloaded/)

Prevent username stealing:
AuthMe Reloaded prevents players who aren't logged in from actions like placing blocks, moving, typing commands or seeing the inventory of the current player.

Anti-Spoof:
The possibility to set up name spoof protection kicks players with uncommon long or short player names before they could actually join.

Sessions:
Login Sessions make it possible that you don't have to login within a given time period.

Configurable:
Each command and every setting can be enabled or disabled by a easy structured config file.

Translatable:
If you don't like English or don't like our default translations you can easily edit almost every message sent by the plugin!

> > > ALL AUTHME VIDEOS TUTORIALS < < <

Features:

E-Mail Recovery System!
Playername spoof protection
Countries Selection! (countries codes)
AntiBot Features!
Protection against "Logged in from another location" messages
Two-factor (2FA) support!
Login sessions
Editable settings & messages
MySQL and SQLITE support
Supported hash algorithms: Available Hash Algorithms
Supports tons of CMS! (Website integration)
Custom MySQL tables/columns (useable for forums, other scripts)
Database queries can be cached
Compatible with NPC and CombatTag plugins
Account restriction through IP and name
Permissions group switching on un-logged-in
Different permission group for Registered and unRegistered users
Support for permissions onJoin with transient vault system
Cache on file for all inventories and enchants for un-logged-in players
Save Quit location to prevent loss of position
Possible to use without a Permissions plugin
Automatic backup system of all your user password data
Default Language Style: en, de, br, cz, pl, fr, ru, hu, sk, es, zhtw, fi, zhcn, nl, and others! (feel free to send me new translations)
Convert SQLite to an usefull authme.sql that you can import on a MySQL database!
Import your database from Rakamak, CrazyLogin, RoyalAuth, vAuth !

Support:

Configuration

How to Configure Authme

Commands

Command list and usage

Permissions

Warning: if you're updating from AuthMe 3.4 to 5.2+ you need to change the permissions nodes.

List of all single permissions

How To

How to use the converter
WebSite Integration
How to convert from Rakamak
Convert from SQLite to MySQL: set MYSQL as backend and run the "/authme converter sqlitetosql" command.

Source: Source Code on Github

JavaDoc: AuthMe Javadoc

Dev Builds

Development builds of this project can be acquired at the provided continuous integration server. These builds have not been approved by the BukkitDev staff. Use them at your own risk.
DevBuilds: ci.codemc.org

Maven dependency:

  <repositories>
      <repository>
          <id>codemc-repo</id>
          <url>https://repo.codemc.io/repository/maven-public/</url>
      </repository>
  </repositories>

  <dependencies>
      <dependency>
          <groupId>fr.xephi</groupId>
          <artifactId>authme</artifactId>
          <version>5.7.0</version>
          <scope>provided</scope>
      </dependency>
  </dependencies>

Metrics

Usage statistics: AuthMeReloaded on BStats.org

Licenses

This product includes and download automatically GeoLite data created by MaxMind, available from https://www.maxmind.com

Credits

Current AuthMe development team members: Our Team

Credits for old versions of authme go to d4rkwarriors, fabe1337 , Whoami and pomo4ka.

Comments

Xephi59
- Location: Lille
- Join Date: 8/10/2012
- Posts: 794
- Member Details
#4618 Xephi59

View User Profile

Send Message

Posted Oct 20, 2013
@iaXedu

Yeah :

https://github.com/confuser/Ban-Management/tree/master/src/me/confuserr/banmanager/Listeners

Ban Management force the PlayerLoginEvent and AsyncPlayerPreLoginEvent to connect on the server even if AuthMe try to kick him

Rollback Post to Revision RollBack
_ForgeUser9607822
- Join Date: 9/11/2012
- Posts: 62
- Member Details
#4617 _ForgeUser9607822

View User Profile

Send Message

Posted Oct 20, 2013
@antichip

You're right. I actually already started with some changes like IPLock and no op on some servers. But I'm gonna change that ever further like you said.

@Xephi59

I do not use VIP slot on my lobby. I have ban management which may interfere.

Rollback Post to Revision RollBack
_ForgeUser10851183
- Join Date: 3/27/2013
- Posts: 394
- Member Details
#4616 _ForgeUser10851183

View User Profile

Send Message

Posted Oct 20, 2013
When changing command in game please check if the new password has symbols wtich are not accepted by mysql, such as üç ş ğ... This is an important issue.

Rollback Post to Revision RollBack
_ForgeUser11246245
- Join Date: 5/14/2013
- Posts: 153
- Member Details
#4615 _ForgeUser11246245

View User Profile

Send Message

Posted Oct 20, 2013
OK just to make sure everyone that is having issues with the old passwords MAKE SURE you are using the same hash as you were on your previous version. NO I still have not tested this build. AND TO BE CLEAR.

A PLUGIN SUCH AS THIS SHOULD ALWAYS BE TESTED ON A NON-PRODUCTION SERVER THOROUGHLY BEFORE USING IT ON YOUR MAIN SERVER.

@BNcraft

Make sure to read and search logs for their IP. ENSURE they are infact NEW.

@Prominentc

There is a plugin that does this, I dont recall it's name but IT does purge essentials, factions, towny, plot-me and a few others.

@rynobot

If all servers use the EXACT same server settings it will use the same info for all servers with authme installed. I used to use it on 9.

@iaXedu

This is a security solution

So in saying that, PLEASE take all security precautions.

SO a lesson in security real quick,

NOTHING IS PERFECT AND SECURITY IS A MYTH.

Now with that said if you want to be as secure as possible here are a few steps to get you started.

allow op only through console, DE-op on login USE NO SETTING TO BYPASS SECURITY, IE: don't allow restricted users, don't be lazy, log-in. Owner should really have rank as the lowest rank. give yourself op if you need to work on stuff or rank yourself up for a few minutes. DO NOT share PLUGIN-INFO. EVER. NEVER EVER EVER OP ANYONE, use permissions, that's what they are for. Well those are the basics, please ignore as usual.

Rollback Post to Revision RollBack
_ForgeUser12327946
- Join Date: 9/29/2013
- Posts: 40
- Member Details
#4614 _ForgeUser12327946

View User Profile

Send Message

Posted Oct 20, 2013
if some players for the first time try to register it says: You have Exeded the max number of Registration for your Account. how do if fix this? p.s. sorry for my bad English! it's not my language!

Rollback Post to Revision RollBack
_ForgeUser10491099
- Join Date: 2/1/2013
- Posts: 2
- Member Details
#4613 _ForgeUser10491099

View User Profile

Send Message

Posted Oct 20, 2013
On version 3.0.2 XAUTH encryption not work.

"Wrong password"

security: minPasswordLength: 4 unLoggedinGroup: unLoggedinGroup passwordHash: XAUTH doubleMD5SaltLength: 8 supportOldPasswordHash: true
Rollback Post to Revision RollBack
_ForgeUser10347766
- Join Date: 1/7/2013
- Posts: 89
- Member Details
#4612 _ForgeUser10347766

View User Profile

Send Message

Posted Oct 19, 2013
Is it possible or might it be possible in the future to delete custom user data files? such as factions and anything else that creates player files?

Last edited by _ForgeUser10347766: Oct 19, 2013

Rollback Post to Revision RollBack
_ForgeUser10032326
- Join Date: 11/25/2012
- Posts: 33
- Member Details
#4611 _ForgeUser10032326

View User Profile

Send Message

Posted Oct 19, 2013
Is it possible to make a global database that will share passwords across all servers in a Bungeecord network?

Rollback Post to Revision RollBack
Xephi59
- Location: Lille
- Join Date: 8/10/2012
- Posts: 794
- Member Details
#4610 Xephi59

View User Profile

Send Message

Posted Oct 19, 2013
Oh also it's the xAuth encryption method that fail , ok i will investigate , sorry

@iaXedu

Do you have any plugin ( like vip slot ) that force joinevent to be allowed until authme try to disallowed?

@pablolop002

What's your bungeecord version plz ?

Rollback Post to Revision RollBack
_ForgeUser10491099
- Join Date: 2/1/2013
- Posts: 2
- Member Details
#4609 _ForgeUser10491099

View User Profile

Send Message

Posted Oct 19, 2013
Hi.

I have problem, my players are reporting to me "Password Incorrect"

This is my CONF CLICK ME

Rollback Post to Revision RollBack
_ForgeUser7479931
- Join Date: 9/1/2011
- Posts: 515
- Member Details
#4608 _ForgeUser7479931

View User Profile

Send Message

Posted Oct 19, 2013
@Xephi59

This is mine

http://pastebin.com/ihQ1y29D

9+-
Rollback Post to Revision RollBack
Forge_User_65063584
- Join Date: 11/23/2012
- Posts: 10
- Member Details
#4607 Forge_User_65063584

View User Profile

Send Message

Posted Oct 19, 2013
Why i get this error?

[SEVERE] [AuthMe] Plugin AuthMe v3.0.1 has failed to register events for class fr.xephi.authme.listener.AuthMeBungeeCordListener because net/md_5/bungee/api/event/ChatEvent does not exist.

Thanks for this great plugin and for your reponse.

Rollback Post to Revision RollBack
_ForgeUser9607822
- Join Date: 9/11/2012
- Posts: 62
- Member Details
#4606 _ForgeUser9607822

View User Profile

Send Message

Posted Oct 19, 2013
I have an error for you: http://pastebin.com/thHRGtZp

And a big problem.. Restricted users seemed to work until one guy logged in on my name and destroyed one of my servers. Luckily it's a minigame server and I made an backup 1 hour earlier so no real damage done. Anyways when people join my server they get forced to the lobby from which they can connect to 3 other servers. They all have AuthMe and all use sessions with restricted users. Ever since this guy logged in on my account I cannot join my own server it now says I'm not the owner of the account. I checked the config and my IP is still there so this is very strange.. My ip starts with 94 the guy who hacked my account starts with 188.

Here is my config again: http://pastebin.com/hPFhj267

Thanks in advance

Rollback Post to Revision RollBack
Xephi59
- Location: Lille
- Join Date: 8/10/2012
- Posts: 794
- Member Details
#4605 Xephi59

View User Profile

Send Message

Posted Oct 19, 2013
I need some informations about Password Hashing problem quickly for fix please :

Please send me your config.yml ( DO NOT FORGET TO REMOVE SOME PASSWORDS ( mysql , etc... ))

Xephi

Rollback Post to Revision RollBack
Xephi59
- Location: Lille
- Join Date: 8/10/2012
- Posts: 794
- Member Details
#4604 Xephi59

View User Profile

Send Message

Posted Oct 19, 2013
For password encryption problems , what is the password hashing method uses please ?

Xephi

Rollback Post to Revision RollBack
_ForgeUser7024401
- Join Date: 6/16/2011
- Posts: 375
- Member Details
#4603 _ForgeUser7024401

View User Profile

Send Message

Posted Oct 19, 2013
@antichip

Thanks, i think that fixed the problem!

Do you also know how a certain ip can bypass the max registrations per ip.

(so i can test it myself if i go to the first spawn or not)

Rollback Post to Revision RollBack
_ForgeUser11246245
- Join Date: 5/14/2013
- Posts: 153
- Member Details
#4602 _ForgeUser11246245

View User Profile

Send Message

Posted Oct 19, 2013
I am sorry I have not had the time to start testing and looking for bugs. I have been busy working on new website. I am not saying it is my responsibility to do so, I just like knowing what is going on.

Xephi59

Would it be possible to subdivide the forums into more issue specific sections? and actually start enforcing it's use? It would just be nice to see the comments kept for comments and not issues. It is your show but it would clean things up quite a bit,

@ZwPBerserk

first join plus has a setting to delay the tp time, set it long and test to see where you need it to be. You could also use essentials spawn send the unregistered group to a specific location, and all others to another one.

Rollback Post to Revision RollBack
_ForgeUser7024401
- Join Date: 6/16/2011
- Posts: 375
- Member Details
#4601 _ForgeUser7024401

View User Profile

Send Message

Posted Oct 19, 2013
Hi,,

I want players to join on the firstspawn spawn set by the firstjoinplus plugin. But this isn't happening.

Authme places the users at the normal spawn after they have registered. Is there a workaround for this?

Rollback Post to Revision RollBack
_ForgeUser9699950
- Join Date: 9/28/2012
- Posts: 74
- Member Details
#4600 _ForgeUser9699950

View User Profile

Send Message

Posted Oct 19, 2013
not all passwords are recognized from 2.9.5 - cant even unregister those users - its glitched - fix asap please

Rollback Post to Revision RollBack
_ForgeUser7479931
- Join Date: 9/1/2011
- Posts: 515
- Member Details
#4599 _ForgeUser7479931

View User Profile

Send Message

Posted Oct 19, 2013
@iaXedu

Can you please specify is this permission you talking about?

authme.player.* - for all user command

Thanks.

Rollback Post to Revision RollBack
To post a comment, please login or register a new account.

Project ID

36083
Created

Jan 28, 2012
Last Released File

May 7, 2026
Total Downloads

3,166,540
License

GNU General Public License ver...

Xephi59 Owner
sgdc3 Author
TuxCoding Contributor

Bukkit

AuthMe Reloaded

Bukkit Plugins

AuthMe Reloaded

Table of Contents

> > > ALL AUTHME VIDEOS TUTORIALS < < <

Features:

Support:

Configuration

Commands

Permissions

Warning: if you're updating from AuthMe 3.4 to 5.2+ you need to change the permissions nodes.

How To

Dev Builds

Maven dependency:

Metrics

Licenses

Credits

Comments

A PLUGIN SUCH AS THIS SHOULD ALWAYS BE TESTED ON A NON-PRODUCTION SERVER THOROUGHLY BEFORE USING IT ON YOUR MAIN SERVER.

This is a security solution

NOTHING IS PERFECT AND SECURITY IS A MYTH.

About This Project

Categories

Members

Recent Files

Bukkit