Author Topic: Servers and Security  (Read 563 times)

Legacy_xyntos

  • Newbie
  • *
  • Posts: 4
  • Karma: +0/-0
Servers and Security
« on: June 04, 2011, 08:06:09 pm »


               So, this is in regards to security, how do I do it?

I noticed that if someone uses the bypass of the authentication server they can still login to the server with no issue.  AND they can play someone elses charachter!?

What is the solution for this, is there a way to force login for the account and the character ingame?  A mod of some sort?
               
               

               
            

Legacy_Lightfoot8

  • Hero Member
  • *****
  • Posts: 4797
  • Karma: +0/-0
Servers and Security
« Reply #1 on: June 04, 2011, 08:27:42 pm »


               There are two setting in nwnplayer.ini to help with this.  Under [ server options] tey are.

Master Server Authentication Required For Player Login=0
Account validation required during Master Server down times=0

They are not the only solutions out there and can have some draw backs.  
Setting the first one to 1 has the draw back that no one will be able to log in if the master server goes down.  

The second one can cause problems if players play from more then one install of the game.   It ites there account to there CD-Key.

At least that is the way i remember it working.  I am hope someone corrects me if I am wrong.

The best method In my opinion would be to write an entry script that forces the player to enter a password after they enter the game.  But that also has the draw back of making your players have to log in basicly twice and every time they log out and back in.   A real draw back if you have players that crash often.
               
               

               
            

Legacy_xyntos

  • Newbie
  • *
  • Posts: 4
  • Karma: +0/-0
Servers and Security
« Reply #2 on: June 04, 2011, 08:29:20 pm »


               I use such a script or addon in my minecraft server, anywhere I can download that script?  I am new to this lol, setting a server up as a request!
               
               

               
            

Legacy_Lightfoot8

  • Hero Member
  • *****
  • Posts: 4797
  • Karma: +0/-0
Servers and Security
« Reply #3 on: June 06, 2011, 11:30:03 pm »


               Sorry for the slow responce.  I just don't check this forum often.  
I do not have a security script myself.  And posting such scripts publicly is often a bad idea.  The making the script public just gives the people trying to crack it a running start.
I would sugest starting by setting the ini setting.
Account validation required during Master Server down times=1
And then seeing if you can join the server admin group that TSMDude  put together.  You may need a server Up an running to join the group however.
               
               

               
            

Legacy_TemplariDM

  • Newbie
  • *
  • Posts: 18
  • Karma: +0/-0
Servers and Security
« Reply #4 on: July 07, 2011, 02:51:17 am »


               this is something that bioware/atari need to fix and get the master server back up to avoid people logging into other's accounts and causing havok.
               
               

               
            

Legacy_FunkySwerve

  • Hero Member
  • *****
  • Posts: 2325
  • Karma: +0/-0
Servers and Security
« Reply #5 on: July 07, 2011, 05:12:57 am »


               I've actually posted a fairly simple cdkey authentication script on the server admin group's forums that Lightfoot mentioned. If you join, you can view it, or I can pm you with it, if you like.

Funky