Is there a way to get more than 3 mirror images from levels 1-10?

The Mirror Image spell (PHB, p. 260) grants you 3 duplicates. Combining Magical Effects (PHB, p. 205) says casting the same spell multiple times does not combine them.

Is there a low level way (under 10th level) through other class features to get more than just 3 mirror images or clone warriors? I am aware that simulacrum can increase this but I am hoping for something lower level that I somehow missed.

Two levels of security on SSH for two usage

On my server, I used to use SSH for one single purpose: remote administration. I am the only administrator. Only I have the required credentials to open a remote shell on the server. I use a pair of keys, a strong password and a one-time password, only my personal IP address is allowed to reach the SSH port and the request rate is limited. I used up-to-date algorithms to encrypt my connection.

Now, I would like to use the SSH server for a second purpose: use SFTP to store my password database on my server so that I can “sync” it between my computers and my smartphone. There are a few problems however:

  • Keepass2Android, the only app I know to use my password database on my smartphone cannot work with today’s recommended algorithms. It seems like the library the app use cannot be upgraded on Android, and that there is nothing the developer (let alone myself) can do about it (see here and here). The available algorithms are:
  • Cipher: aes128-ctr,aes128-cbc,3des-ctr,3des-cbc,blowfish-cbc,aes192-ctr,aes192-cbc,aes256-ctr,aes256-cbc
  • MAC: hmac-md5,hmac-sha1,hmac-sha2-256,hmac-sha1-96,hmac-md5-96
  • Host key: ssh-rsa,ssh-dss,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521
  • If I want to be able to access my database “on the go” I cannot restrict the incoming connections to my personal IP address anymore.
  • I cannot (and do not want to) use OTP to access my database.

So here is the solution I came with:

  • Regarding my admin user:
    • He is the only one allowed to access shell through SSH.
    • I configured PAM so that only him needs OTP to log in.
    • I make sure that my client always use the recommended algorithms when I open a remote shell.
  • Regarding my SFTP user:
    • He has no shell access (ForceCommand internal-sftp).
    • He is chrooted in his home directory.
    • When connecting from the android app, the used algorithm won’t be the strongest available, but it’s all right because the only data that will be exchanged is my already well encrypted database.
  • Plus :
    • I limit the incoming connection rate on the SSH port
    • I use Fail2Ban to ban any IP which makes too many login attempts for a long time

I have three questions mainly:

  • What do you think about this setup?
  • Can you confirm that allowing weaker algorithms will only affect security by making the data exchange less “secret” when a client actually use it? In other words am I right to think that when my Android app will download/upload the database the exchange will be less secure than usual, but the rest of the time security level doesn’t change? Allowing weaker cipher, MAC or host key algorithm won’t make it easier to hack into my server?
  • Is allowing only these two users with custom settings for each (Match User) the good way to go, or should I go even further by running to sshd instances?

Thank you for your insight!

Flyerjet

what are reasonable age expections for levels?

This is not a question about enforced limits but about plausible NPC reactions, to the PCs and how they explain other NPCs to the players. (Minimums more than maximums, since all a character has to do to stay lower level is not adventure.)

If an NPC can gauge a human sorcerer’s level, and meets one that is 25, and the expectation is that most start adventures at 18 and go up a level generally once a year:

  • a second level one spent most time doing things other than adventure
  • a fifth level one spent a fair amount of time doing other things, or had many encounters with little experience
  • a seventh level one has adventured steadily
  • a tenth level one has hit some amazing adventures with much danger and experience
  • a fifteenth level one has had nothing but amazing adventures (or is a fraud, or the apparent age is a factor of illusion or de-aging magic)
  • a twentieth level one is certainly a fraud or using magic to de-age or appear younger

These can be widely off, of course, with the second level one having been the victim of aging magic or the twentieth level one having had to start adventuring young and had some amazing adventures, but they are accurate enough that NPCs would not find such assumptions — an inn keeper saying that the sorceress staying at the inn isn’t the real adventuring type, or a high-level wizard commenting that another wizard has certainly gotten far for his age — blowing up in their faces often enough to discourage estimates.

Is a year a plausible? Six months? Two years? Or would variation be too much for NPCs to form expectations?

The setting is one that does not require training to go up in level, and in which there are plentiful known dungeons where adventures can be had and with routine supplies near enough to not require travel. Unusual supplies or moving to a new dungeons takes weeks at most, usually days. So, characters who want to can adventure with minimal down-time.

What DnD 5e build (with minimum number of combined levels over all classes) is needed to summon all summonable monsters?

What build would make if you just want to be able summon all monsters (of the summonable monsters) without a general purpose spell like wish or special equipment – how many levels of a multiclass do you need at minimum? Specify background. I believe a Wizard (Summoning school) can nearly summon all monster types with CR limits but for instance has to choose between demons and animals at level 4.

How many levels of wizard does my player need, from 7 levels of eldritch knight, to be able to action surge fireball?

I’m DMing for a group that has a player who is an eldritch knight level 7 and wants to multiclass into wizard to expand his spellcasting abilities. The short version of my question is as given in the title and I’d think is ultimately based on two factors

  1. When do you get access to 3rd level spell slots as an Eldritch Knight 7/Wizard X?
  2. When can you cast 3rd level spells as a multiclassed character?

First, spell slots: This seems the easier question of the two and is outlined fairly clearly in the PHB p.164

You determine your available spell slots by adding together all your levels in the bard, cleric, druid, sorcerer, and wizard classes, half your levels (rounded down) in the paladin and ranger classes, and a third of your fighter or rogue levels (rounded down) if you have the Eldritch Knight or the Arcane Trickster feature. Use this total to determine your spell slots by consulting the Multiclass Spellcaster table.

And the table is given as (again on p.164)

MULTICLASS SPELLCASTER: SPELL SLOTS PER SPELL LEVEL LvL. 1st 2nd 3rd 4th 5th 6th 7th 8th 9th 1st   2 2nd   3 3rd   4   2 4th   4   3 5th   4   3  2 6th   4   3  3 

So, for an Eldritch Knight level 7, that’s 7/3 = 2 (rounded down). Each level of wizard would give a full level for the table, so Eldritch 7/ Wizard 1 = table row 3, Eldritch 7/Wizard 2 = row 4, Eldritch 7/Wizard 3 = row 5 (to hit 3rd level spell slots).

The 2nd question of “when can you cast a 3rd level spell in this situation?” doesn’t seem to be directly answered by the spell slots table and the best/nearest answer I can find is found above the spell slot section on PHB. 164:

You determine what spells you know and can prepare for each class individually, as if you were a single classed member of that class.

So, taking this pretty much verbatim, from his 7 levels of Eldritch knight he’d have his same 2 cantrips, 5 spells known, 4 first level and 2 2nd level spells from his 7 levels of that class (PHB p.75). Wizard has it’s own table but for the sake of brevity, doesn’t give access to/spell slots for 3rd level spells until 5th level. So, my understanding is that he’d need to be an Eldritch Knight 7/Wizard 5 before he could pull off the desired “Action Surge Double Fireball” turn.

That seems to be the answer from looking online and a literal reading of the PHB but that would mean that he’d have, in theory at Eldritch 7/Wizard 3 for instance, as given above based on the table, 3rd level spell slots that… he couldn’t use for 3rd level spells. The PHB does seem to support this as a possibility by saying (PHB p.164):

If you have more than one spellcasting class, this table might give you spell slots of a level that is higher than the spells you know or can prepare. You can use those slots, but only to cast your lower level spells. If a lower level spell that you cast, like burning bands, has an enhanced effect when cast using a higher level slot, you can use the enhanced effect, even though you don’t have any spells of that higher level.

For example, if you are the aforementioned ranger 4/wizard 3, you count as a 5th-level character when determining your spell slots: you have four Ist level slots, three 2nd level slots, and two 3rd level slots. However, you don’t know any 3rd level spells, nor do you know any 2nd-level ranger spells. You can use the spell slots of those levels to cast the spells you do know-and potentially enhance their effects.

Is that correct? My personal opinion is that’s a rather long time (12 being near the end of many campaigns) and kind of lame, but I try to go by the book for the most part.

So, please tell me if any of the above is incorrect or if there’s something I’ve overlooked. Thanks for your time and apologies for any formatting errors.

How does class level rebuilding work if you want to change the order of classes (but not the classes or total number of levels)?

Say a character took 5 levels in duskblade, then 5 levels in abjurant champion, then 5 in cleric, then 5 in wizard (it’s not a particularly optimized character). They later decide they want to use abjurant champion’s capstone feature on their wizard class, instead of duskblade. However, the prestige class says:

At each level, you gain new spells per day and an increase in caster level (and spells known, if applicable) as if you had also gained a level in an arcane spellcasting class to which you belonged before adding the prestige class level.

(emphasis mine)

This means that in order to “register” their wizard spellcasting with abjurant champion at all, they need to “move” at least one of their wizard levels “in front of” at least one of the abjurant champion levels (ideally all of them, for caster progression). In effect, they want to go from:

duskblade 5/abjurant champion 5/cleric 5/wizard 5

to:

duskblade 5/wizard 1/abjurant champion 5/cleric 5/wizard 4

Now, the PHB II section on class level rebuilding (pp.197-198) says:

Each time your character completes a rebuild quest, you can change a number of levels equal to 1/5 his character level (rounded up) from one class to any other class (or classes).

So, in the example above, how many levels are they “changing”? Are they only changing one level, as the others get “pushed out of the way”, and therefore they only need to do one rebuild quest?

Or are they changing every level from character level 6th up to character level 16th, and thus need to complete several rebuild quests, changing a handful of levels each time in order to slowly move their wizard level further up the chain?

Or are they not changing any class levels, because in the end every class level they have after rebuilding, they also had before, meaning there’s no actual change taking place? And so, all they need to do is reorganize the way they list things on their character sheet and retrain the abjurant champion class features?

At which levels, if any, can a Warlock use a Spell Scroll of 6th Level or Higher?

Suppose for the sake of argument a Warlock of indeterminate level finds a scroll of plane shift.

Plane shift is indicated as being on the Warlock’s spell list [PHB, pg 210: Warlock Spells], so would this Warlock be able to cast the spell through this scroll [pending a successful Spellcasting Check]?

Furthermore, does this answer depend on the Warlock’s level, i.e. would a Level 13 Warlock (with their 7th level Mystic Arcanum) be able to cast this spell without a spellcasting check, or would they still require the spellcasting check?