Forum

> > CS2D > General > Error: Only Registered USGN users allowed
Forums overviewCS2D overviewGeneral overviewLog in to reply

English Error: Only Registered USGN users allowed

18 replies
To the start Previous 1 Next To the start

old Error: Only Registered USGN users allowed

NoTy
User Off Offline

Quote
Hi.

I've been getting this Error "Failed to join 54.38.156.49:36964
Only registered U.S.G.N. users allowed!
Login (Options -> Net) with your account or get an account at UnrealSoftware.de!" since 3 days ago despite being logged in properly. I can join any other server except for this one, it is also password protected (Password: match)

54.38.156.49:36964 -> CS2D.EU l Mix/Match [DE]

It doesn't have a whitelist, I haven't changed any setting in CS2D in the last 2-3 months. It just appeared out of nowhere 3 days ago. I changed my U.S.G.N. password, but it didn't work. I tried to log off and log in again, but didn't work. Tried both STEAM and the normal client, but none of them work, tried a different IP, but doesn't work. I ran out of solutions, so I came here.

Thanks.

old Re: Error: Only Registered USGN users allowed

DC
Admin Off Offline

Quote
Hi,

I changed some U.S.G.N. account verification things because of possible vulnerabilities. The change happened like 3 days ago so I'm very sure it's causing the problem for you.

What is your internet service provider?

I'm asking because I assume that you are one of the few people who have a dynamic IP when using UDP connections. I could re-add what I just removed but that would also add vulnerabilities again. I could also add it only for a small IP range (the one your ISP is using) to minimize the vulnerability of the system.

old Re: Error: Only Registered USGN users allowed

NoTy
User Off Offline

Quote
Hi,

This is my ISP: RCS & RDS Residential (From Romania)

I also tried to join on this server 136.243.203.76:36965, another Mix server password protected and says same thing.

old Re: Error: Only Registered USGN users allowed

DC
Admin Off Offline

Quote
Great! Glad to hear that and sorry for the inconvenience.

What I did will only work for some people with that specific ISP I guess. I'll have to work on a better and more secure solution in long term.

old Re: Error: Only Registered USGN users allowed

Kolia_rus
Security Supporter Off Offline

Quote
user DC has written
I'll have to work on a better and more secure solution in long term.


Yes please. Because I had to write a poor Lua script which checks if admin's IP matches the required one. Because I am a noob in Lua it provides a lot of lags, but that's better than nothing. But the best solution is fixing this vulnerability on USGN level (if you mean the USGN IDs faking).

old Re: Error: Only Registered USGN users allowed

DC
Admin Off Offline

Quote
@user Kolia_rus: That should basically be fixed now for like 99.9% of all users. That's what my change from 3 days ago was good for. At least when talking about actual IDs and not just faking the displayed name.

The problem are funky ISPs (like the one mentioned here) which give you different IPs per UDP "connection" (different local IPs for different remote IPs in other words). That's a super weird thing and I didn't know that something like that is done when I designed the U.S.G.N. authentication mechanism.

Right now I can only:
• whitelist the IP range of those ISPs: Login verification works again for those people but their IDs can potentially be faked (but only by people with the same ISP/IP range, only while the victims are logged in etc.)
• do nothing: People with those ISPs can't properly play because login verification doesn't work (that's what happened to user NoTy in the last 3 days, sorry)

For better fixes I would have to update all game clients and the U.S.G.N. which is a much more complex thing.

old Re: Error: Only Registered USGN users allowed

DC
Admin Off Offline

Quote
Thanks I already have enough information. Like said before it shouldn't be possible anymore to use U.S.G.N. IDs of other people.

If you - or anyone else - still notice(s) that this is happening please let me know!

old Re: Error: Only Registered USGN users allowed

DC
Admin Off Offline

Quote
Huh... that's weird. The changes I applied are still in place and you also still have an IP in the same IP range. I'm confused.

I will add some logging so I see what's going on.

Edit: I broke it in between with that logging but it should log properly now..

Edit²: Ok weird. I see your attempts but for some reason it doesn't work. Maybe you just have to restart CS2D
edited 2×, last 19.11.21 07:55:52 pm

old Re: Error: Only Registered USGN users allowed

NoTy
User Off Offline

Quote
It now works properly on the password-protected CS2D.EU servers (Mix servers) but doesn't work on the FWS public servers and most wanted server which is another password-protected Mix/Match server.

FWS Servers - "Server is verifying your USGN login..."
Mostwanted Mix Server - "Error "Failed to join 54.38.156.49:36964
Only registered U.S.G.N. users allowed!"

Edit: "Server is verifying your USGN login..." this is still there

Edit²: Both errors are now back.
edited 2×, last 20.11.21 10:24:33 am

old Re: Error: Only Registered USGN users allowed

DC
Admin Off Offline

Quote
I restarted the USGN several times inbetween. This may lead to problems like that.

I think I might have found and fixed the issue now.

Edit: Okay, one of the issues. Maybe there are still more. I improved the logging even more to find them.

btw: You don't have to tell me the servers you're trying. That's not relevant.
edited 1×, last 19.11.21 08:15:21 pm

old Re: Error: Only Registered USGN users allowed

NoTy
User Off Offline

Quote
Hi,

I don't know if you saw or you're already working on this, but both errors are back, I changed my IP and the Error "Failed to join 54.38.156.49:36964" is back; "Server is verifying your USGN login..." this one is still here too.

old Re: Error: Only Registered USGN users allowed

DC
Admin Off Offline

Quote
I guess there is no secure way to fix that without changing everything

I re-enabled 2 IP part matching for now but this makes things more insecure. I assume however that that part had a bug before so maybe it's not as insecure as before. Or maybe it's not working anymore now. Both things are possible.
To the start Previous 1 Next To the start
Log in to replyGeneral overviewCS2D overviewForums overview