Go Back   EQEmulator Home > EQEmulator Forums > General > General::General Discussion

General::General Discussion General discussion about EverQuest(tm), EQEMu, and related topics.
Do not post support topics here.

Reply
 
Thread Tools Display Modes
  #1  
Old 05-05-2010, 02:13 AM
KLS
Administrator
 
Join Date: Sep 2006
Posts: 1,348
Default No I can't help you - LOST PASSWORDS

I get a couple requests a week to help someone with a login password recovery.

I cannot help you. I don't know if Rogean can help you but if anyone can he can.
Reply With Quote
  #2  
Old 05-05-2010, 07:09 PM
trevius's Avatar
trevius
Developer
 
Join Date: Aug 2006
Location: USA
Posts: 5,946
Default

Yeah, I get the same thing about as often. Hopefully at some point, there will be a password recovery option for Login Server accounts. I am sure it would save everyone time and frustration.

I don't have access to Login Server account stuff at all and I don't have admin rights on these forums to change accounts/emails/passwords/activations/etc, so please don't PM me asking me to do so or I will just link you this thread.
__________________
Trevazar/Trevius Owner of: Storm Haven
Everquest Emulator FAQ (Frequently Asked Questions) - Read It!

Last edited by trevius; 05-14-2012 at 01:27 AM..
Reply With Quote
  #3  
Old 05-06-2010, 12:15 AM
KLS
Administrator
 
Join Date: Sep 2006
Posts: 1,348
Default

Yeah, I'd really like to just stop wasting everyone's time. Now everyone knows who they need to bug (also bug him to implement password recovery!).
Reply With Quote
  #4  
Old 05-06-2010, 07:02 AM
llllmvllll
Fire Beetle
 
Join Date: Dec 2009
Location: Franklin In
Posts: 1
Default

Can you delete a account I have that I no longer use ?
If so how do I go about getting that done ?
Reply With Quote
  #5  
Old 05-07-2010, 03:23 AM
MattWitt
Fire Beetle
 
Join Date: Aug 2008
Location: US
Posts: 10
Default

Quote:
Originally Posted by llllmvllll View Post
Can you delete a account I have that I no longer use ?
If so how do I go about getting that done ?

This, if we can't get PWs reset can we at least get the defunct accounts deleted so we can make new ones?
Reply With Quote
  #6  
Old 05-20-2010, 09:10 PM
wolfwalkereci
Discordant
 
Join Date: Dec 2005
Posts: 435
Default

about time someone posted this shit. I remember when I had lost my passwords and was posting asking if anyone could help or knew who to talk to.
Was completely fucking ignored then and it sucked.
Reply With Quote
  #7  
Old 01-25-2011, 10:00 PM
Sorrow*qc
Fire Beetle
 
Join Date: Sep 2010
Posts: 2
Default

ok so i lost all of my characters if that happened to me???
Reply With Quote
  #8  
Old 01-26-2011, 01:59 AM
KLS
Administrator
 
Join Date: Sep 2006
Posts: 1,348
Default

You can try talking to Rogean or you can talk to the server operators where the characters are and see if they'll transfer them to new accounts for you.
Reply With Quote
  #9  
Old 01-27-2011, 10:13 PM
Rogean's Avatar
Rogean
Administrator
 
Join Date: Jul 2003
Location: Massachusetts
Posts: 708
Default

The reason we don't allow password recoveries is because it is a security issue.. thats why loginserver accounts are seperate from forums to begin with.

I'm open to ideas for how a password recovery tool will be handled, but I'm afraid any solution will be open for the possibility of accounts being compromised.
__________________
EQEmulator Developer / Administrator
Reply With Quote
  #10  
Old 01-27-2011, 10:19 PM
Akkadius's Avatar
Akkadius
Administrator
 
Join Date: Feb 2009
Location: MN
Posts: 2,071
Default

Quote:
Originally Posted by Rogean View Post
The reason we don't allow password recoveries is because it is a security issue.. thats why loginserver accounts are seperate from forums to begin with.

I'm open to ideas for how a password recovery tool will be handled, but I'm afraid any solution will be open for the possibility of accounts being compromised.
I vouch for generic security questions upon setting up an account as well as the option to set them up as an existing account. Of course this wouldn't do anyone any good for those who have lost their account information now, but would start helping those in the future.
Reply With Quote
  #11  
Old 01-27-2011, 10:33 PM
Rogean's Avatar
Rogean
Administrator
 
Join Date: Jul 2003
Location: Massachusetts
Posts: 708
Default

Solutions that require additional information at user creation aren't going to work as it wouldn't be applicable to the other 135k login accounts. The majority of account recovery requests are those coming back after years.
__________________
EQEmulator Developer / Administrator
Reply With Quote
  #12  
Old 01-28-2011, 04:11 AM
trevius's Avatar
trevius
Developer
 
Join Date: Aug 2006
Location: USA
Posts: 5,946
Default

If people can get into their forum accounts, then it should be possible to recover their LS information, which is the issue I see posted about here 99% of the time (can log into forum account, but not LS accounts).

My suggestion would be to setup a new field that stores registration email address from the forums also into a registration email address for the Login Server. The forum email address can be changed by logging into the forums, but the LS email address can't be changed (or at least not without logging in with an LS account password). Then, let them have an option to send a password recovery email to their LS email address, which should have to be owned by the correct person.

Unfortunately, that won't work for people who no longer have the same email address, but it should work in a good number of the cases. I can't really think of any other way to make password recovery retro-active and secure without doing a mass email that requires every member to set a security question (which just causes emails to get tagged as spam). A less secure option would be to just give forum accounts access to do a LS password recovery based on that they authenticated into the forums.
__________________
Trevazar/Trevius Owner of: Storm Haven
Everquest Emulator FAQ (Frequently Asked Questions) - Read It!
Reply With Quote
  #13  
Old 01-30-2011, 06:02 AM
jlocke
Fire Beetle
 
Join Date: Jan 2005
Posts: 1
Default

It's kind or ridiculous to set up any security beyond accessing a forum account for login passwords. Wouldn't it be kind of easy just to copy the forum password field data into the login password field data in a SQL table upon requesting a "password reset"? I'm assuming they're both in the same type of encryption. Like the man said, if someone has access to their forum account (like me) they should be the owner. It's not like you're holding billions of EQLive Plat on a mule here nor any super secret squirrel stuff.
Reply With Quote
  #14  
Old 01-30-2011, 05:10 PM
Huppy's Avatar
Huppy
Demi-God
 
Join Date: Oct 2010
Posts: 1,333
Default

I always just go through 5 minutes of tedious, trivial computer work to solve
this problem - Put your eqemu client account(s) info in a standard text file
and burn it on a 40 cent blank disc. Some might want to use a marker and
label the disc "Passwords I Forgot"
Reply With Quote
  #15  
Old 01-30-2011, 06:11 PM
Rogean's Avatar
Rogean
Administrator
 
Join Date: Jul 2003
Location: Massachusetts
Posts: 708
Default

The reason the loginserver accounts were kept seperate is because with forum software involved and when this entire system was set up, SQL Injections into forum software was a common occurance. In order to protect the game accounts, they were kept seperate for that reason, neither having any more power to reset the other.

We also have to consider the fact that theres still a compromised database from 2007 floating around somewhere. They haven't been able to do damage to loginserver accounts with that unless people were stupid enough to make their passwords the same. Opening up the option for forum accounts to reset loginserver accounts would be bad times for anyone who hasn't changed their forum password yet.
__________________
EQEmulator Developer / Administrator
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

   

All times are GMT -4. The time now is 01:24 PM.


 

Everquest is a registered trademark of Daybreak Game Company LLC.
EQEmulator is not associated or affiliated in any way with Daybreak Game Company LLC.
Except where otherwise noted, this site is licensed under a Creative Commons License.
       
Powered by vBulletin®, Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
Template by Bluepearl Design and vBulletin Templates - Ver3.3