|
|
| (20 intermediate revisions by 3 users not shown) |
| Line 1: |
Line 1: |
| − | = Frequently Asked Questions about the BZFlag List Server = | + | ==Overview== |
| | + | The BZFlag list server is a public service provided by the project administrators. By default all official game clients will connect to the list server to retrieve a list of publicly available [[BZFS|game servers]] as well as to authenticate [[Global Registration]] data. |
| | | | |
| − | This page addresses some of the most commonly asked questions about use of the BZFlag List Server.
| + | ==Technology== |
| | | | |
| − | == Where does the list server reside? ==
| + | The list server is written in php and runs on top of an apache web server. It uses a pair of MYSQL databases to store data. The user portion of the database is shared with the PHPBB3 software that isused to run the BZFlag forums. The source code for the list server is licensed under the LGPL as part of the [[BZFlag Source|BZFlag Source Code]] under the 'db' project. |
| | | | |
| − | The list server runs on the same server as the official BZFlag bulletin board found at http://my.BZFlag.org/bb/ in the United States. The account database for the bulletin board also provides common authentication for use inside the game. More information on general board use is available in the [http://my.bzflag.org/bb/viewtopic.php?t=891 Board FAQ].
| + | === URL === |
| | + | Multiple URLs are provided for the list server. Some Internet Service Providers (ISPs) are known to cache web traffic on the default HTTP port (port 80). For users with such ISPs it may benefit them to use an alternate URL. |
| | | | |
| − | == How do I create a name or callsign? ==
| + | Valid URLs are; |
| | + | * http://my.bzflag.org/db/ |
| | + | * http://my.bzflag.org:81/db/ |
| | | | |
| − | Go to the board at http://my.BZFlag.org/bb/, click on the tab at the upper left side of the page which says “Register,” and follow the instructions. More information on user names is available in the [http://my.bzflag.org/bb/viewtopic.php?t=2382 Usernames] thread.
| + | ==Global Registration== |
| | | | |
| − | == Do I have to create a name or callsign here? ==
| + | The list server is the authentication point for the [[Global Registration]] system. The registration system lets users tie their user accounts from the [[BZFlag Forums]] to the playing account. |
| | | | |
| − | No, you do not. Most game servers still allow local registration, and unregistered users. We recommend that you register your name here, though. You can read the board content, but you cannot post content without board registration. Also, registration here protects your callsign from being used by someone else on those game servers utilizing the list server.
| + | The list server is used to verify each users login credentials and provide a temporary token for the client to pass to the game server. The game server then verifies the token with the list server, and gets any authentication info it may need, such as user groups. |
| | | | |
| − | == How is my password stored? == | + | ==Hosting== |
| | | | |
| − | Your password is encrypted by the board server with an MD5 hash and stored in the board name database. The MD5 hash is a one-way encryption. In other words, there is no way to decrypt the encrypted password. For example, the password “joey” encrypts to the MD5 hash “<code>d6ba0682d75eb986237fb6b594f8a31f</code>.”
| + | Currently the list server runs on the same web server as the official [[BZFlag Forums|BZFlag bulletin boards]] in the United States. |
| | | | |
| − | The only way to break your password is to use a computer to generate words, run the same MD5 encryption on them, and compare the results, until it finds a match. This requires a tremendous amount of computing power. Generally, the longer your password is, and the more unusual symbols you place in it, the more secure it is, too. Most passwords are compromised or broken because players use a simple word, one that a friend knows, such as a pet’s name. Many people have been unpleasantly surprised by this. Some users make their password the same as their call sign...this is really easy to guess, so don't do it! | + | === Outages === |
| | + | The project administrators attempt to keep list server outages to a minimum, but the current list server implementation does not handle heavy traffic loads as well as it could. Discussion and design work has been done on ways to improve the list server, anyone who would like to help with this project should read the [[DevelopmentGoals#List_Server|Development Goals section]] on the list server, as well as discuss ideas with the development staff on IRC. |
| | | | |
| − | == How secure is my call sign and password? == | + | ==Public Usage Policy== |
| | | | |
| − | Your password is encrypted in the board server database. However, when you use a Web browser to enter the board, your password is transmitted in clear text to the forum server. The server encrypts it and compares it to what it has stored in its database. You may want to read more about [http://www.rsasecurity.com/rsalabs/node.asp?id=2253 MD5]. The board server utilizes phpbb, an open source forum system.
| + | The list server is subject to the BZFlag [[List Server Usage Policy]]. This policy states what the intended uses of the service are, as well as accepted behaviors of it's users are. |
| | | | |
| − | Your password is not sent to the game server where you will be playing, unless you are using a locally registered ID on that server.
| + | ==Future== |
| | + | A large project is underway to upgrade the underlying technology behind the list server and global authentication. The main goals are to make the system more robust and extensible. To this effort work is being done to move away from a PHPBB based user manager, and toward a system based on LDAP. The project has been ongoing for over two years and has over 10,000USD spent on it from Google Summer of Code Funds. |
| | | | |
| − | == What if I forget my password? ==
| + | More info can be found on the [[BZAuthd]] page. |
| | | | |
| − | BZBB has a "Forgot My Password" feature. Use it, and it will e-mail you your current password. If that doesn't work for you for some reason, you can use the [http://my.bzflag.org/bb/viewforum.php?f=67 Registration Issues] forum and post for help (guest posts are allowed).
| + | ==See also== |
| | + | * [[Global Registration]] |
| | + | * [[List Server Usage Policy]] |
| | + | * [[BZFlag Forums]] |
| | + | * [[BZFS]] |
| | | | |
| − | == What if someone else has changed my password? ==
| + | [[Category:Public Services]] |
| − | | + | |
| − | That should be difficult to do. Under normal circumstances, passwords can only be changed by someone who knows your password. If you haven’t shared it, it shouldn’t have been changed. If this has happened, it’s a far more serious circumstance than just forgetting your password. You should make a post in the [http://my.bzflag.org/bb/viewforum.php?f=67 Registration Issues] forum, or PM one of the board admins.
| + | |
| − | | + | |
| − | == How many IDs can I have? ==
| + | |
| − | | + | |
| − | As many as you have email addresses. Each email address you have created in the forum can only have one associated callsign. Therefore, you must have a separate email address for each callsign you have registered in the system.
| + | |
| − | | + | |
| − | [There is an official forum note that multiple accounts are frowned upon here: http://my.bzflag.org/bb/viewtopic.php?t=890, item 13, which should be addressed above and in the Board Rules thread, depending on whether or not this is going to be encouraged or enforced. This question has already been raised by some users, and JeffM has been responding that it’s possible to do it with multiple email addresses, though it appears that he also wrote the Board guidelines above. Just need a decision about that conflict and the text smoothed out appropriately. -john] | + | |
| − | | + | |
| − | == When I join a game, I see -, +, and @ in front of player callsigns. What do these mean? ==
| + | |
| − | | + | |
| − | The game status screen shows the different levels of player registration. Players without a symbol are using unregistered callsigns.
| + | |
| − | | + | |
| − | * The – (dash or minus sign) indicates a player using a registered callsign that has not yet identified him or herself with a valid password. Most servers require that registered players identify with a password, or with a global login through the list server, in order to play.
| + | |
| − | * The + (plus sign) indicates a player that is registered and identified, either locally or through the list server.
| + | |
| − | * The @ (at sign) identifies players with some level of administrator authority on the game server.
| + | |
| − | | + | |
| − | == How do I use my account once I've created one? ==
| + | |
| − | | + | |
| − | When you start the client, you are presented with the main menu. When you select Join Game, you are taken to the Join sub-menu. You have a number of options at this point. The third selection on this screen is where you enter your callsign. The fourth selection is where you enter your password. When you attempt to connect to a game, your client software will automatically attempt to authenticate you on the list server.
| + | |
| − | | + | |
| − | == Why does it say “Identify yourself” when I join a server? ==
| + | |
| − | | + | |
| − | This is telling you that your callsign wasn’t properly identified. Perhaps the game server got a bad token from the list server, or your callsign is also registered locally on this game server. The actual message in this case is slightly longer. It should read:
| + | |
| − | | + | |
| − | <code>This callsign is registered. You must identify yourself before playing.<br>
| + | |
| − | Identify with /identify <your password></code>
| + | |
| − | | + | |
| − | If you used this server previously and registered on it, you should be able to use the /identify command to join with the local password you had registered on this server.
| + | |
| − | | + | |
| − | If you didn’t register on this server previously, you may have just mistyped your password in the Join Game menu. Go back, retype it, and rejoin the game.
| + | |
| − | | + | |
| − | There is also the possibility that someone else registered the callsign you are trying to use. If that’s the case, you need to contact the game server admin. Most game servers have contact information that displays as soon as you join the server. Some also have entries in the board forum “Servers: General Discussion.”
| + | |
| − | | + | |
| − | == What is allowable behavior? ==
| + | |
| − | | + | |
| − | We do expect decent behavior in the forums and on game servers. Each game server has its own rules, as established by the owner of the server, and some are more liberal than others. The board has guidelines which are published under [http://my.bzflag.org/bb/viewtopic.php?t=890 Board Rules] in the [http://my.bzflag.org/bb/viewforum.php?f=8 News and Announcements] forum. Basically, we expect mature, intelligent behavior on this board and in most game servers. We encourage your participation and contribution to the community.
| + | |
| − | | + | |
| − | == What happens if I don’t behave on this board? ==
| + | |
| − | | + | |
| − | This varies on individual game servers. On this board, however, if you fail to heed warnings, we have a number of options ranging from establishing probationary status on your account to completely blocking your access (ban). A complete block of your access would result in a complete block of your gameplay on servers using the list server, at least under your blocked callsign.
| + | |
| − | | + | |
| − | == How can I appeal a ban? ==
| + | |
| − | | + | |
| − | # The prefered way to handle this is to post a message on the [http://my.bzflag.org/bb/viewforum.php?f=67 Registration Issues] forum. Note that you do not have to be logged in a a registered user to post here.
| + | |
| − | # The next best choice is to use IRC. The developers and admins hang out in #BZFlag on irc.freenode.net most of the time. Be patient as they may not be watching when you ask your question. http://irchelp.org/ has more information on IRC. There is a web interface to this channel on http://my.bzflag.org/irc/irc.cgi if you do not have an IRC client. Please change the nickname and realname as directed. You may want to read up about [http://catb.org/~esr/faqs/smart-questions.html asking smart questions] first.
| + | |
| − | # Finally, you can send email directly to TimRiker at Tim@Rikers.org. Tim’s pretty busy, so don’t expect an immediate response. But be assured that he will read it as soon as he can.
| + | |
The BZFlag list server is a public service provided by the project administrators. By default all official game clients will connect to the list server to retrieve a list of publicly available game servers as well as to authenticate Global Registration data.
The list server is written in php and runs on top of an apache web server. It uses a pair of MYSQL databases to store data. The user portion of the database is shared with the PHPBB3 software that isused to run the BZFlag forums. The source code for the list server is licensed under the LGPL as part of the BZFlag Source Code under the 'db' project.
Multiple URLs are provided for the list server. Some Internet Service Providers (ISPs) are known to cache web traffic on the default HTTP port (port 80). For users with such ISPs it may benefit them to use an alternate URL.
The list server is used to verify each users login credentials and provide a temporary token for the client to pass to the game server. The game server then verifies the token with the list server, and gets any authentication info it may need, such as user groups.
The project administrators attempt to keep list server outages to a minimum, but the current list server implementation does not handle heavy traffic loads as well as it could. Discussion and design work has been done on ways to improve the list server, anyone who would like to help with this project should read the Development Goals section on the list server, as well as discuss ideas with the development staff on IRC.
A large project is underway to upgrade the underlying technology behind the list server and global authentication. The main goals are to make the system more robust and extensible. To this effort work is being done to move away from a PHPBB based user manager, and toward a system based on LDAP. The project has been ongoing for over two years and has over 10,000USD spent on it from Google Summer of Code Funds.
