[Guide]: Steamcmd Username + Steam Guard via Smartphone (compatible with LinuxGSM, no plaintext password) w/ securely saved credentials

[codefaux]

User story

As a server admin, I wanted to install a Terraria server. I didn't have a second account, didn't want plaintext password, and am using SteamGuard via Smartphone. This is listed as unsupported, but I accomplished it without a single extra tool. Being security-minded, I refuse to leave plaintext credentials, but obviously desire all functionality provided by LGSM.

Game

Terraria, 7 Days, Satisfactory, Proj. Zomboid, Minecraft Bedrock, probably more later

Linux distro

Other

Command

command: start, command: stop, command: restart, command: monitor, command: details, command: update, command: validate, command: console, command: install

Further information

First, requirements:

• Understand and edit lgsm config files
• Understand and execute steamcmd by hand as intended gameserver user

OK, so here's what I did. I imagine this could be adapted to any server requiring login. All commands are AS DESIRED GAME SERVER USER 1- Download and install terraria lgsm server per Instructions step 1 and step 2 2- Run ./terrariaserver install to create base folders/config files, will fail due to missing login

3- Run SteamCMD -- possibly must use ~/.steam/steamcmd/steamcmd.sh (* This is as it was on my system ie ArchLinux, not sure if it'll be identical everywhere -- may need to use this version instead of package manager version due to saved data location? Unable to verify, need testers!) 4- Initiate login -- in my case using SteamGuard -- login <username> 4b- Complete login securely, aka provide password and authenticate via smartphone 5- Enable stored credential login when using 'login' command without password (Advised/explained by SteamCMD in 'help login'! Read this to understand the mechanism!) via running @NoPromptForPassword 1 5b- Exit SteamCMD exit

6- Edit server config; provide username, LEAVE PASSWORD EMPTY nano lgsm/config-default/config-lgsm/terrariaserver/_default.cfg -- NOTE: It SAYS to edit a different file, but I find that when I do, the lgsm script overwrites it with the default when I run install. Thus, I edit the stored default, which then copies itself to the proper location. Any input would be appreciated. NOTE2: No, I don't wish to discuss my preference of console editor.

7- Install server, update/verify/etc as usual!

• No changes to LGSM core.
• No extra tools.
• No sketchy stored credentials.
• Works with any SteamCMD server requiring login/ownership.
• Does not require an extra dummy account.
• Only info leakage via LGSM tooling/config files is Steam username

Relevant log output

(Provided as screenshots)

Steps to reproduce

...also provided above, my bad

[dgibbs64]

NoPromptForPassword looks like it might be a useful setting for storing steamcmd credentials rather than the traditional method. I think this would be a good feature to add.

[dgibbs64]

I have got the basic concept working so the no password feature works. However, I need to figure out how to implement on the installer and auto installer. As well as what to do if updates fail because of loss of creds.

[mastercoms]

NoPromptForPassword doesn't do anything in this case. It doesn't get archived so setting it after logging in and then exiting has no effect. Even if it did, its only purpose is causing login to fail rather than to prompt if credentials are not cached. What's actually doing the work here is logging in to steamcmd prior and then letting it cache the credentials by providing a blank password to LGSM.