This wiki is archived and useful information is being migrated to the main bzflag.org website

Difference between revisions of "Global Registration"

From BZFlagWiki
Jump to: navigation, search
(Overview)
Line 1: Line 1:
 
=Overview=
 
=Overview=
  
Global Registration is the link between the [[BZFlag Forums]] and the BZFlag [[List Server]]. This link allows players to use their fourm users names as callsigns in game, and recive a number of in game services tied to that account, such as;
+
Global Registration is the link between the [[BZFlag Forums]] and the BZFlag [[List Server]]. This link allows players to use their forum users names as call signs in game, and receive a number of in game services tied to that account, such as;
  
 
* exclusive use of the name on most servers
 
* exclusive use of the name on most servers
* the ability to remove or "ghost" unregistered users atempting to use your existing name.
+
* the ability to remove or "ghost" unregistered users attempting to use your existing name.
 
* access to public groups that many servers use to grant in game permissions.
 
* access to public groups that many servers use to grant in game permissions.
  
= Frequently asked questions =
+
=Registration and Account Management=
== How do I create a name or callsign? ==
+
Currently registration and account management is handled by the [[BZFlag Forums]], but may be split off to a separate system at a later date. Users wishing to create a global account should visit the forums and create a new account. Each user account will require a unique e-mail address.
  
Go to the board at http://my.BZFlag.org/bb/, click on the tab at the upper left side of the page which says “Register,” and follow the instructions.  More information on user names is available in the [http://my.bzflag.org/bb/viewtopic.php?t=2382 Usernames] thread.
+
== Activation ==
 +
After registration is complete, the user will receive a verification e-mail to ensure that all contact information is correct. The user must follow the instruction in the e-mail before the account will be made active and can be used.
  
== Do I have to create a name or callsign here? ==
+
==Username and Password Changes==
 +
The user can use the "profile" page on the fourms to modify any of the information about the account, including username and password. It his highly recomended that users keep their passwords secure.
  
No, you do not.  Most game servers still allow local registration, and unregistered users.  We recommend that you register your name here, though.  You can read the board content, but you cannot post content without board registration.  Also, registration here protects your callsign from being used by someone else on those game servers utilizing the list server.
+
==Password Retrieval==
 +
In the unfortunate event that a user forgets their password, they can use the "forgot password" link on the fourm login page to have the system e-mail them a new password.
  
== How is my password stored? ==
+
=Security=
 +
Passwords are encrypted and stored only in the registration system's database, they are never sent out to game servers, or any other player. The list server uses a temporary token system when communicating with game servers to protect the user's private information.
  
Your password is encrypted by the board server with an MD5 hash and stored in the board name database. The MD5 hash is a one-way encryption.  In other words, there is no way to decrypt the encrypted password.  For example, the password “joey” encrypts to the MD5 hash “<code>d6ba0682d75eb986237fb6b594f8a31f</code>.
+
Weak passwords based on simple numeric strings (1234) or dictionary words (dog, god, mom ) are easily guessable and are not recommended. Users are responsible for keeping there own passwords secure.
  
The only way to break your password is to use a computer to generate words, run the same MD5 encryption on them, and compare the results, until it finds a match.  This requires a tremendous amount of computing power.  Generally, the longer your password is, and the more unusual symbols you place in it, the more secure it is, too.  Most passwords are compromised or broken because players use a simple word, one that a friend knows, such as a pet’s name.  Many people have been unpleasantly surprised by this.  Some users make their password the same as their call sign...this is really easy to guess, so don't do it!
+
=In Game services=
  
== How secure is my call sign and password? ==
+
==Usage==
 +
To use your global account in game, a user must simply enter their full fourm username as the callsign, and enter their fourm password into the appropriate fields in the "Join Game" menu in the game client.
  
Your password is encrypted in the board server database.  However, when you use a Web browser to enter the board, your password is transmitted in clear text to the forum server.  The server encrypts it and compares it to what it has stored in its database.  You may want to read more about [http://www.rsasecurity.com/rsalabs/node.asp?id=2253 MD5]. The board server utilizes phpbb, an open source forum system.
+
==Callsign Markers==
 +
Users that are registered and that have authenticated with the system will recive a "+" marker at the end of their callsign in game. This indicates that the user is who they say they are.
  
Your password is not sent to the game server where you will be playing, unless you are using a locally registered ID on that server.
+
If a callsign is used that is registerd, but the user did not succsessfuly authenticate they will receive a "-" at the end of the name.
  
== What if I forget my password? ==
+
Users who have been given administrative permisions ( kick and ban ) by the server owner, and who are authenticate will receive a "@" mark to indicate their status.
  
BZBB has a "Forgot My Password" feature. Use it, and it will e-mail you your current password. If that doesn't work for you for some reason, you can use the [http://my.bzflag.org/bb/viewforum.php?f=67 Registration Issues] forum and post for help (guest posts are allowed).
+
=See also=
 
+
[[List Server Usage Policy]]
== What if someone else has changed my password? ==
+
 
+
That should be difficult to do.  Under normal circumstances, passwords can only be changed by someone who knows your password.  If you haven’t shared it, it shouldn’t have been changed.  If this has happened, it’s a far more serious circumstance than just forgetting your password.  You should make a post in the [http://my.bzflag.org/bb/viewforum.php?f=67 Registration Issues] forum, or PM one of the board admins.
+
 
+
== How many IDs can I have? ==
+
 
+
As many as you have email addresses.  Each email address you have created in the forum can only have one associated callsign.  Therefore, you must have a separate email address for each callsign you have registered in the system.
+
 
+
[There is an official forum note that multiple accounts are frowned upon here: http://my.bzflag.org/bb/viewtopic.php?t=890, item 13, which should be addressed above and in the Board Rules thread, depending on whether or not this is going to be encouraged or enforced.  This question has already been raised by some users, and JeffM has been responding that it’s possible to do it with multiple email addresses, though it appears that he also wrote the Board guidelines above.  Just need a decision about that conflict and the text smoothed out appropriately. -john]
+
 
+
== When I join a game, I see -, +, and @ in front of player callsigns.  What do these mean? ==
+
 
+
The game status screen shows the different levels of player registration.  Players without a symbol are using unregistered callsigns.
+
 
+
* The – (dash or minus sign) indicates a player using a registered callsign that has not yet identified him or herself with a valid password.  Most servers require that registered players identify with a password, or with a global login through the list server, in order to play.
+
* The + (plus sign) indicates a player that is registered and identified, either locally or through the list server.
+
* The @ (at sign) identifies players with some level of administrator authority on the game server.
+
 
+
== How do I use my account once I've created one? ==
+
 
+
When you start the client, you are presented with the main menu.  When you select Join Game, you are taken to the Join sub-menu.  You have a number of options at this point.  The third selection on this screen is where you enter your callsign.  The fourth selection is where you enter your password.  When you attempt to connect to a game, your client software will automatically attempt to authenticate you on the list server.
+
 
+
== Why does it say “Identify yourself” when I join a server? ==
+
 
+
This is telling you that your callsign wasn’t properly identified.  Perhaps the game server got a bad token from the list server, or your callsign is also registered locally on this game server.  The actual message in this case is slightly longer.  It should read:
+
 
+
<code>This callsign is registered.  You must identify yourself before playing.<br>
+
Identify with /identify <your password></code>
+
 
+
If you used this server previously and registered on it, you should be able to use the /identify command to join with the local password you had registered on this server.
+
 
+
If you didn’t register on this server previously, you may have just mistyped your password in the Join Game menu.  Go back, retype it, and rejoin the game.
+
 
+
There is also the possibility that someone else registered the callsign you are trying to use.  If that’s the case, you need to contact the game server admin.  Most game servers have contact information that displays as soon as you join the server.  Some also have entries in the board forum “Servers: General Discussion.”
+
 
+
== What is allowable behavior? ==
+
 
+
We do expect decent behavior in the forums and on game servers.  Each game server has its own rules, as established by the owner of the server, and some are more liberal than others.  The board has guidelines which are published under [http://my.bzflag.org/bb/viewtopic.php?t=890 Board Rules] in the [http://my.bzflag.org/bb/viewforum.php?f=8 News and Announcements] forum.  Basically, we expect mature, intelligent behavior on this board and in most game servers.  We encourage your participation and contribution to the community.
+
 
+
== What happens if I don’t follow the pollicy ==
+
 
+
This varies on individual game servers.  On this board, however, if you fail to heed warnings, we have a number of options ranging from establishing probationary status on your account to completely blocking your access (ban).  A complete block of your access would result in a complete block of your gameplay on servers using the list server, at least under your blocked callsign.
+
 
+
== How can I appeal a ban? ==
+
 
+
# The preferred way to handle this is to post a message on the [http://my.bzflag.org/bb/viewforum.php?f=67 Registration Issues] forum. Note that you do not have to be logged in a a registered user to post here.
+
# The next best choice is to use IRC. The developers and admins hang out in #BZFlag on irc.freenode.net most of the time. Be patient as they may not be watching when you ask your question. http://irchelp.org/ has more information on IRC. There is a web interface to this channel on http://my.bzflag.org/irc/irc.cgi if you do not have an IRC client. Please change the nickname and realname as directed. You may want to read up about [http://catb.org/~esr/faqs/smart-questions.html asking smart questions] first.
+
# Finally, you can send email directly to TimRiker at Tim@Rikers.org. Tim’s pretty busy, so don’t expect an immediate response. But be assured that he will read it as soon as he can.
+

Revision as of 22:19, 20 November 2007

Overview

Global Registration is the link between the BZFlag Forums and the BZFlag List Server. This link allows players to use their forum users names as call signs in game, and receive a number of in game services tied to that account, such as;

  • exclusive use of the name on most servers
  • the ability to remove or "ghost" unregistered users attempting to use your existing name.
  • access to public groups that many servers use to grant in game permissions.

Registration and Account Management

Currently registration and account management is handled by the BZFlag Forums, but may be split off to a separate system at a later date. Users wishing to create a global account should visit the forums and create a new account. Each user account will require a unique e-mail address.

Activation

After registration is complete, the user will receive a verification e-mail to ensure that all contact information is correct. The user must follow the instruction in the e-mail before the account will be made active and can be used.

Username and Password Changes

The user can use the "profile" page on the fourms to modify any of the information about the account, including username and password. It his highly recomended that users keep their passwords secure.

Password Retrieval

In the unfortunate event that a user forgets their password, they can use the "forgot password" link on the fourm login page to have the system e-mail them a new password.

Security

Passwords are encrypted and stored only in the registration system's database, they are never sent out to game servers, or any other player. The list server uses a temporary token system when communicating with game servers to protect the user's private information.

Weak passwords based on simple numeric strings (1234) or dictionary words (dog, god, mom ) are easily guessable and are not recommended. Users are responsible for keeping there own passwords secure.

In Game services

Usage

To use your global account in game, a user must simply enter their full fourm username as the callsign, and enter their fourm password into the appropriate fields in the "Join Game" menu in the game client.

Callsign Markers

Users that are registered and that have authenticated with the system will recive a "+" marker at the end of their callsign in game. This indicates that the user is who they say they are.

If a callsign is used that is registerd, but the user did not succsessfuly authenticate they will receive a "-" at the end of the name.

Users who have been given administrative permisions ( kick and ban ) by the server owner, and who are authenticate will receive a "@" mark to indicate their status.

See also

List Server Usage Policy