Forum

Page 1 of 2 12 LastLast
Results 1 to 15 of 21
  1. #1
    Join Date
    October 2009
    Location
    France
    Posts
    39

    Forbid a new Admin Server Query Creation.

    Hello,

    For security reason, I would like to forbid the creation of a new Admin Server Query?
    It's possible?

    Thanks you for your answer,

    Sinceraly,

  2. #2
    Join Date
    January 2010
    Location
    Secret Base in Arctic Region
    Posts
    1,671
    Just dont give anyone the serveradmin name/password.
    If you dont want to SA etc. be able to create their own ServerQuery-Account remove the permission "b_client_create_modify_serverquery_login" and its grant-value from the groups.

  3. #3
    Join Date
    October 2009
    Location
    France
    Posts
    39
    And if a client have a tokens for to be Admin Server Query.
    Doesn't He can with this solution?

  4. #4
    Join Date
    October 2009
    Location
    France
    Posts
    39
    More explanation : I just want that anyone (exept serveradmin) can to connect in Admin Server Query.

  5. #5
    Join Date
    February 2006
    Location
    Texas, USA
    Posts
    4,143
    Don't give out the serveradmin password and you should be fine. Also follow Alcazar's recommendation above.

    To my knowledge a member cannot even see the ASQ server group unless they are part of it and I don't think you can even create tokens for this group. This is something I will have to try later today for my own knowledge.

    Assuming a client does have a token for ASQ, remove this token from the token manager if he hasn't used it. If he has, just remove him from the server group.

  6. #6
    Join Date
    October 2009
    Location
    France
    Posts
    39
    Create a token for Admin Server Query it's possible, I saw this in the webinterface by psychokiller : http://forum.teamspeak.com/showthread.php?t=49547

    And with this permission : "b_client_create_modify_serverquery_login" all Server Admin can create a Server Query Login ?

  7. #7
    Join Date
    January 2010
    Location
    Secret Base in Arctic Region
    Posts
    1,671
    Quote Originally Posted by Bgdu67 View Post
    Create a token for Admin Server Query it's possible, I saw this in the webinterface by psychokiller : http://forum.teamspeak.com/showthread.php?t=49547
    Maybe the webinterface connects as superadmin, so its possible to create such token.
    In general, to add an user to a group or create a token for it, you must have a value of "i_group_member_add_power" that is equal or higher then the "i_group_needed_member_add_power" value of that group.

    Quote Originally Posted by Bgdu67 View Post
    And with this permission : "b_client_create_modify_serverquery_login" all Server Admin can create a Server Query Login ?
    Any group who has this permission can create their own ServerQuery Login.
    What they can do with this depends on the permissions of their Group(s).

  8. #8
    Join Date
    October 2009
    Location
    France
    Posts
    39
    Ok, it's exatly for the groups server admin the value for "i_group_member_add_power" and "i_group_needed_member_add_power" are 75.

    Ok, So for a person can't change the number of slots or the port (for example)... I must delete this permission : "b_client_create_modify_serverquery_login"

    I have an other question of the same subject, how can I remove this permission of all teamspeak at my instance? It's possible, or I must on each teamspeak modify the number of the group server admin (example: servergroupdelperm sgid=9 permid=21693 )?

  9. #9
    Join Date
    October 2009
    Location
    France
    Posts
    39
    Up please save me :$

  10. #10
    Join Date
    December 2004
    Location
    RF
    Posts
    3,006
    Quote Originally Posted by Bgdu67 View Post
    Hello,

    For security reason, I would like to forbid the creation of a new Admin Server Query?
    It's possible?

    Thanks you for your answer,

    Sinceraly,
    You can bind serverquery listening port to localhost.
    That would prevent anyone from outside of the PC to connect directly to it.

  11. #11
    Join Date
    October 2009
    Location
    France
    Posts
    39
    It's a dedicated server ...So it's impossible for me or very complicate!
    But my question now it's :
    how can I remove this permission of all teamspeak at my instance?

  12. #12
    Join Date
    December 2004
    Location
    RF
    Posts
    3,006
    Quote Originally Posted by Bgdu67 View Post
    It's a dedicated server ...So it's impossible for me or very complicate!
    Kidding, right?


    But my question now it's :
    how can I remove this permission of all teamspeak at my instance?
    Which "this"?

  13. #13
    Join Date
    October 2009
    Location
    France
    Posts
    39
    I reformulate my question:

    On my instance, I would like to delete a permission (number 21693) for all teamspeak at one go.

    It's possible ?

  14. #14
    Join Date
    January 2010
    Location
    Secret Base in Arctic Region
    Posts
    1,671
    You can delete it using ServerQuery.
    Just select each server and use command servergroupdelperm for all groups from whom it should be removed.

  15. #15
    Join Date
    October 2009
    Location
    France
    Posts
    39
    Ok, and I can't to select all group of server admin suddenly?

    Thank you Alcazar for this informations,

    Sinceraly,

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Replies: 1
    Last Post: July 20th, 2015, 03:25 PM
  2. Replies: 10
    Last Post: April 20th, 2014, 02:17 PM
  3. Replies: 0
    Last Post: July 24th, 2011, 10:59 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •