How do I create an account on my server?

[Simbaclaws]

Okay, so I've got my server setup and I've put account manager settings in my config.lua.
However my otclient asks for a username a password an ip address and port to the server etc.
Whenever I type in some username and password the server obviously responds: Account name or password incorrect.

Now I don't have a website setup to send some queries to the database to create accounts (yet). But I was wondering how I can get into the server with a new account from within otclient. Would I have to alter the database? Or is there a way to register yourself through otclient on a server?

If I HAVE to do it through the database, what are common values for things like the id field and creation and type field?
Also is the password supposed to be in plain text or is there a encryption I have to use in order to fill it in?

 

[Sinth]

Okay, so I've got my server setup and I've put account manager settings in my config.lua.
However my otclient asks for a username a password an ip address and port to the server etc.
Whenever I type in some username and password the server obviously responds: Account name or password incorrect.

Account Manager?

On TFS 0.3.6 that i'm using it's in the config.. "Account manager = true/false"

True = you leave account nr/name and pass blank and just login, and you'll login as "Account manager" which can create accounts and characters.

 

[Tarek]

Okay, so I've got my server setup and I've put account manager settings in my config.lua.
However my otclient asks for a username a password an ip address and port to the server etc.
Whenever I type in some username and password the server obviously responds: Account name or password incorrect.

Now I don't have a website setup to send some queries to the database to create accounts (yet). But I was wondering how I can get into the server with a new account from within otclient. Would I have to alter the database? Or is there a way to register yourself through otclient on a server?

If I HAVE to do it through the database, what are common values for things like the id field and creation and type field?
Also is the password supposed to be in plain text or is there a encryption I have to use in order to fill it in?

You can try this.
https://otland.net/threads/account-manager.235700/#post-2275079


You can also create accounts by using INSERT.

 

[Simbaclaws]

Account Manager?

On TFS 0.3.6 that i'm using it's in the config.. "Account manager = true/false"

True = you leave account nr/name and pass blank and just login, and you'll login as "Account manager" which can create accounts and characters.

yeah like I said I've already put account manager information in my config.lua I'm using 1076 tfs 1.2 but it just doesn't show up :/

You can try this.
https://otland.net/threads/account-manager.235700/#post-2275079


You can also create accounts by using INSERT.

yeah that's what I thought... insert it through the database. I was just wondering about the encryption and such.
For example the post says that it uses sha1 encryption but if I simply do a sha1 encryption on my password then what about salts? are they used? if so my password won't work... I have to replicate the exact same string.

And if forgottenserver doesn't use any salts, I'm actually concerned about the safety of my users. Nowadays unsalted encrypted strings are easilly decrypted with something like hashcat.
If someone hacks my database and all encrypted strings are plain sha1 encryptions without salts I will get worried...

 

[Tarek]

yeah like I said I've already put account manager information in my config.lua I'm using 1076 tfs 1.2 but it just doesn't show up :/



yeah that's what I thought... insert it through the database. I was just wondering about the encryption and such.

uhm, TFS 1.x doesn't have any account manager. It was removed after the TFS 1.x series was started. You have to either use my link in phpmyadmin. Or a website.

 

[Sinth]

uhm, TFS 1.x doesn't have any account manager. It was removed after the TFS 1.x series was started. You have to either use my link in phpmyadmin. Or a website.

What, why the hell did they take that away? Super-easy for testing :/

Not that I care, i'm happy with my 036

 

[Simbaclaws]

uhm, TFS 1.x doesn't have any account manager. It was removed after the TFS 1.x series was started. You have to either use my link in phpmyadmin. Or a website.

So is it true that all encrypted passwords in my database are unsalted? I'm affraid of dictionary attacks and rainbow table attacks on my database.

Should I continue whining until someone proposes a commit to the forgottenserver source code on github?
I'll use the non salted sha1 to solve my current issue, but I would like to see this implemented in the future.
Where can I go to propose such a request?