1. TeamSpeak 3 server user management
The mechanism controlling user permissions on a
TeamSpeak 3 server is fundamentally different than in
TeamSpeak 2. In TeamSpeak 2 individual users were
added to the servers database and permissions bound
to a user login name and password. In TeamSpeak
3 user login names and passwords no longer exist.
Instead users connect to a virtual server providing just
a nickname, which is only used for how to display the
user to others but in no way related to access control.
To indentify a user on a TeamSpeak 3 virtual server, a
public key encryption mechanism is used: When the
Client is started for the first time, it automatically
creates a key pair consisting of a public and a private
key. The first time a new user connects to a virtual
server, his client will automatically send his public key
to the server.
The virtual server creates a unique identifier from this
public key and stores this identifier in its database. So
instead of identification with login and password, a
TeamSpeak 3 server identifies users by their unique ID.
Should the user delete his private key and create a
new one when connecting, he will be treated as a new
individual by the server.
Since there is no input needed to “register” on a
TeamSpeak 3 server there is no such thing as a manual
registration in TeamSpeak 3.
Basically once you connect you are automatically
registered on the server you connected to. When you
join again the server will recognize you.
2. TeamSpeak 3 permission overview
All settings that you can apply to a client on the server
side are stored in reference to the clients unique ID.
This way, when the client reconnects to the server
maybe using a new IP, a new nickname the server can
still recoginize it by the unique ID, and apply these
settings. One of the more important settings you can
apply to clients is of course to grant or revoke certain
permissions to them.
Clients joining for the first time will automatically
become a member of the default Server Permissions
Group that is configured via the server settings – also
clients that join a channel they have not visited before
will automatically be inserted into the Default Channel
Permission Group (also configured via the server
settings). Usually you will be a member of some kind of
administrator group that allows you to configure the
server in the way you like it. The default group layout
contains a “Server Admin” group for this purpose.
When a new virtual server is created, the servers global
template groups are copied to the virtual servers server
default and admin group, so modifying the templates
is a good way to setup a security and access policy for
multiple virtual servers without the need to modify
each virtual servers permissions individually, although
this can still be done to tweak individual virtual
servers if required