In addons\sourcemod\configs\core.cfg make sure you have:
Code:
/**
* If set to yes, SourceMod will validate steamid auth strings with the Steam backend before giving out admin access.
* This can prevent malicious users from impersonating admins with stolen Steam apptickets.
* If Steam is down, admins will not be authenticated until Steam comes back up.
* This option increases the security of your server, but is still experimental.
*/
"SteamAuthstringValidation" "yes"
and in cfg\sourcemod\smac.cfg
Code:
// [smac_client.smx] Kick clients that fail to authenticate within 10 seconds of joining the server.
// -
// Default: "0"
// Minimum: "0.000000"
// Maximum: "1.000000"
smac_validate_auth "1"