Skip to content

Warmane: new accounts fail auth with platform=Mac (LOGON_PROOF 0x09) #138

@silentcoder84

Description

@silentcoder84

Problem

New Warmane accounts (created in 2025-2026) fail to authenticate when using platform=Mac. The LOGON_CHALLENGE succeeds (server returns B, g, N, salt as expected), but LOGON_PROOF is rejected with result=0x09. Switching to platform=Windows makes auth succeed, but then Windows Warden kicks the bot within seconds.

Old accounts (created ~2020 or earlier) continue to work fine with platform=Mac.

What I've verified

  • SRP6 math is correct — proven by old accounts authenticating successfully with the exact same code path
  • Same g=7, same N, same code, same password — only difference is account age
  • Tried all case combinations for account/password — all fail
  • Changing password on Warmane website doesn't help
  • platform=Windows auths successfully on the same new account, confirming credentials are correct
  • Built a transparent auth proxy to capture the real WoW client's LOGON_CHALLENGE — confirmed client sends os=Win while wowchat sends os=OSX

Reproduction

  1. Create a new account on warmane.com
  2. Configure wowchat with platform=Mac (default)
  3. Connect to Icecrown → "Invalid realm version" or auth rejection
  4. Change to platform=Windows → auth succeeds, then "WARDEN ON WINDOWS IS NOT SUPPORTED" and disconnect

Related issues

Theory

Warmane appears to compute/store the SRP6 verifier differently based on the platform field in the LOGON_CHALLENGE, or outright rejects Mac platform for accounts that were first authenticated from a Windows client. Since web registration likely defaults to a Windows verifier, new accounts are locked to Windows.

The only accounts that work with Mac are ones that were first-authed as Mac (either via wowchat/headless bot or a native Mac WoW client) before Warmane tightened their restrictions.

Question

Has anyone found a workaround? Specifically:

  • Is there a way to "register" an account as Mac-compatible on Warmane?
  • Has anyone successfully handled Windows Warden to stay connected?
  • Does the fjaros quote about accounts "magically working one day" have any known trigger?

Metadata

Metadata

Assignees

No one assigned

    Labels

    server issueCannot be fixed due to target server's behavior.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions