Mantis Bug Tracker

View Issue Details Jump to Notes ] Issue History ] Print ]
IDProjectCategoryView StatusDate SubmittedLast Update
0006677opensim[GRID] Hypergridpublic2013-06-14 05:372015-02-28 12:12
Reporteraiaustin 
Assigned To 
PrioritynormalSeverityminorReproducibilityalways
StatusnewResolutionopen 
PlatformPCOSWindowsOS Version8
Product Versionmaster (dev code) 
Target VersionFixed in Version 
Summary0006677: [Hypergrid] "Unauthorized machine" message may be IP confusion between server and viewer machines addresses
DescriptionThere may be a confusion between the server IP address and the viewer IP address as seen by or reported by the Gatekeeper when teleporting via Hypergrid leading to "Unauthorized machine" messages indicating the viewer is connecting on the IP address which is actually the server IP address.

Robust.exe Server and Region OpenSim.exe Host is virtual.aiai.ed.ac.uk = 129.215.219.86
Viewer System is on another computer on same subnet with IP 129.215.219.52

Note also on return to the home grid, the "Gatekeeper sees me as " message has no IP afterwards.

Hypergrid hop from Openvue grid Vue-9000 region to OSGrid Wright Plaza

13:19:23 - [HOME AGENT HANDLER]: Unauthorized machine 129.215.219.86 tried to set client ip to 129.215.219.52
13:19:23 - [USER AGENT SERVICE]: Request to login user Ai Austin (@stored IP) to grid http://hg.osgrid.org:80/ [^]
13:19:23 - [USER AGENT SERVICE]: this grid: http://virtual.aiai.ed.ac.uk:8002/,desired [^] grid: http://hg.osgrid.org:80/ [^]
13:19:24 - [USER AGENT SERVICE]: Verifying agent token http://hg.osgrid.org:80/;b83702e7-503d-4d55-a5b5-f31239995c3c [^] against http://hg.osgrid.org:80/;b83702e7-503d-4d55-a5b5-f31239995c3c [^]
13:19:24 - [USER AGENT SERVICE]: Gatekeeper sees me as 129.215.219.86
13:19:25 - [USER AGENT SERVICE]: Verifying Client session 7247475c-0543-4608-873e-647b7283a43f with reported IP 129.215.219.52.
13:19:25 - [USER AGENT SERVICE]: Comparing 129.215.219.52 with login IP 129.215.219.52 and MyIP 129.215.219.52; result is True
13:19:26 - [USER AGENT SERVICE]: Verifying Client session 7247475c-0543-4608-873e-647b7283a43f with reported IP 129.215.219.52.
13:19:26 - [USER AGENT SERVICE]: Comparing 129.215.219.52 with login IP 129.215.219.52 and MyIP 129.215.219.52; result is True
13:19:26 - [PRESENCE SERVICE]: Session 7247475c-0543-4608-873e-647b7283a43f logout
13:19:26 - [GRID USER SERVICE]: User e24a9015-f5ca-452b-8c95-d32e34cb9d64 is offline

Now try returning via hop://virtual.aiai.ed.ac.uk:8002/Vue-9000/122/123/26 [^]

13:25:31 - [GATEKEEPER SERVICE]: Request to link to Vue-9000
13:25:35 - [GATEKEEPER SERVICE]: Request to get hyperlink region bd09a792-eba5-11dc-95ff-0800200c9a66
13:25:36 - [HOME AGENT HANDLER]: Unauthorized machine 74.63.198.138 tried to set client ip to 129.215.219.52
13:25:36 - [USER AGENT SERVICE]: Request to login user Ai.Austin @virtual.aiai.ed.ac.uk (@stored IP) to grid http://virtual.aiai.ed.ac.uk:8002/ [^]
13:25:36 - [USER AGENT SERVICE]: this grid: http://virtual.aiai.ed.ac.uk:8002/,desired [^] grid: http://virtual.aiai.ed.ac.uk:8002/ [^]
13:25:36 - [GATEKEEPER SERVICE]: Login request for Ai.Austin @virtual.aiai.ed.ac.uk @ http://virtual.aiai.ed.ac.uk:8002/ [^] (e24a9015-f5ca-452b-8c95-d32e34cb9d64)at Vue-9000 using viewer Firestorm-Release 4.4.0.33720, channel Firestorm-Release, IP 129.215.219.52, Mac 01f7e45fe8f33f8745ccd9752e13eeaa, Id0 bdae2cb88dc63e929dc131ac61e57054 Teleport Flags 0
13:25:36 - [GATEKEEPER SERVICE]: Verifying http://virtual.aiai.ed.ac.uk:8002 [^] against http://virtual.aiai.ed.ac.uk:8002 [^]
13:25:36 - [USER AGENT SERVICE]: Verifying agent token http://virtual.aiai.ed.ac.uk:8002/;5e88a508-a334-412f-a4bd-88fef8a2d46b [^] against http://virtual.aiai.ed.ac.uk:8002/;5e88a508-a334-412f-a4bd-88fef8a2d46b [^]
13:25:36 - [GATEKEEPER SERVICE]: Identity verified for Ai.Austin @virtual.aiai.ed.ac.uk @ http://virtual.aiai.ed.ac.uk:8002/ [^]
13:25:36 - [GATEKEEPER SERVICE]: User is OK
13:25:36 - [PRESENCE SERVICE]: LoginAgent e24a9015-f5ca-452b-8c95-d32e34cb9d64 with session 7247475c-0543-4608-873e-647b7283a43f and ssession fed8cc32-6912-4f2d-b97e-b06ff277e527
13:25:36 - [GATEKEEPER SERVICE]: Login presence ok
13:25:36 - [GATEKEEPER SERVICE]: destination ok: Vue-9000
13:25:36 - [GATEKEEPER SERVICE]: launching agent ViaHGLogin
13:25:36 - [USER AGENT SERVICE]: Gatekeeper sees me as
13:25:37 - [Groups.Handler]: GETMEMBERSHIP
13:25:37 - [Groups.Handler]: GETMEMBERSHIP
13:25:38 - [USER AGENT SERVICE]: Verifying Client session 7247475c-0543-4608-873e-647b7283a43f with reported IP 129.215.219.52.
13:25:38 - [USER AGENT SERVICE]: Verifying Client session 7247475c-0543-4608-873e-647b7283a43f with reported IP 129.215.219.52.
13:25:38 - [USER AGENT SERVICE]: Comparing 129.215.219.52 with login IP 129.215.219.52 and MyIP 129.215.219.52; result is True
13:25:38 - [USER AGENT SERVICE]: Comparing 129.215.219.52 with login IP 129.215.219.52 and MyIP 129.215.219.52; result is True
13:25:39 - [OfflineIM.V2.Handler]: GET
TagsNo tags attached.
Git Revision or version numberr/22889
Run Mode Grid (Multiple Regions per Sim)
Physics EngineBulletSim
Script Engine
Environment.NET / Windows64
Mono VersionNone
ViewerFirestorm 4.4.0 OS
Attached Files

- Relationships

-  Notes
(0024091)
BlueWall (administrator)
2013-06-14 05:51

There is a discrepancy in the ip address because of masquerading/firewall, but you have a token generated as you leave the grid that gets you back in. Try going to OSGrid, then restart your Robust server and see what happens. Also, login to OSGrid, then try jumping to your local grid.

We might think about using the MAC address as a fallback authentication in situations where we can't otherwise resolve the client by token or ip?
(0024092)
aiaustin (developer)
2013-06-14 06:06
edited on: 2013-06-14 06:07

I assume the masquerading/firewall is at the OSGrid end... as the other two machines are on the same subnet and within our main firewall, so except for specific machine Windows firewalls they should see each other directly.

Okay. I teleported to OSGrid.. then closed down my Openvue robust server and regions and restarted them. Then I tried to teleport home... which worked. I still got the Unauthorized machine message.. but this time from an IP address 74.63.198.138 which is plaza08.osgrid.org, rather than it trying to masquerade as the Openvue grid SERVER IP address for the return address. It seemed to be okay for the Openvue Robust level, but then the Openvue region server kicked off the avatar and logged out the viewer immediately with this message...

13:56:54 - [ENTITY TRANSFER MODULE]: Region Vue-9000 did not accept Ai Austin e2
4a9015-f5ca-452b-8c95-d32e34cb9d64: Failed to verify user presence in the grid f
or Ai Austin, access denied to region Vue-9000.


Here is the Robust gatekeeper exchange...

13:56:50 - [HOME AGENT HANDLER]: Unauthorized machine 74.63.198.138 tried to set client ip to 129.215.219.52
13:56:50 - [USER AGENT SERVICE]: Request to login user Ai.Austin @virtual.aiai.ed.ac.uk (@stored IP) to grid http://virtual.aiai.ed.ac.uk:8002/ [^]
13:56:50 - [USER AGENT SERVICE]: this grid: http://virtual.aiai.ed.ac.uk:8002/,desired [^] grid: http://virtual.aiai.ed.ac.uk:8002/ [^]
13:56:50 - [GATEKEEPER SERVICE]: Login request for Ai.Austin @virtual.aiai.ed.ac.uk @ http://virtual.aiai.ed.ac.uk:8002/ [^] (e24a9015-f5ca-452b-8c95-d32e34cb9d64)at Openvue using viewer Firestorm-Release 4.4.0.33720, channel Firestorm-Release, IP 129.215.219.52, Mac 01f7e45fe8f33f8745ccd9752e13eeaa, Id0 bdae2cb88dc63e929dc131ac61e57054 Teleport Flags 0
13:56:50 - [GATEKEEPER SERVICE]: Verifying http://virtual.aiai.ed.ac.uk:8002 [^] against http://virtual.aiai.ed.ac.uk:8002 [^]
13:56:50 - [USER AGENT SERVICE]: Verifying agent token http://virtual.aiai.ed.ac.uk:8002/;399f9d1e-b76e-41e3-b902-46d9fb05dd27 [^] against http://virtual.aiai.ed.ac.uk:8002/;399f9d1e-b76e-41e3-b902-46d9fb05dd27 [^]
13:56:50 - [GATEKEEPER SERVICE]: Identity verified for Ai.Austin @virtual.aiai.ed.ac.uk @ http://virtual.aiai.ed.ac.uk:8002/ [^]
13:56:50 - [GATEKEEPER SERVICE]: User is OK
13:56:50 - [PRESENCE SERVICE]: LoginAgent e24a9015-f5ca-452b-8c95-d32e34cb9d64 with session 7247475c-0543-4608-873e-647b7283a43f and ssession fed8cc32-6912-4f2d-b97e-b06ff277e527
13:56:50 - [GATEKEEPER SERVICE]: Login presence ok
13:56:50 - [GATEKEEPER SERVICE]: destination ok: Openvue
13:56:50 - [GATEKEEPER SERVICE]: launching agent ViaHGLogin
13:56:50 - [USER AGENT SERVICE]: Gatekeeper sees me as
13:56:51 - [Groups.Handler]: GETMEMBERSHIP
13:56:51 - [Groups.Handler]: GETMEMBERSHIP
13:56:52 - [USER AGENT SERVICE]: Verifying Client session 7247475c-0543-4608-873e-647b7283a43f with reported IP 129.215.219.52.
13:56:52 - [USER AGENT SERVICE]: Verifying Client session 7247475c-0543-4608-873e-647b7283a43f with reported IP 129.215.219.52.
13:56:52 - [USER AGENT SERVICE]: Comparing 129.215.219.52 with login IP and MyIP ; result is False
13:56:52 - [USER AGENT SERVICE]: Comparing 129.215.219.52 with login IP and MyIP ; result is False

(0024093)
aiaustin (developer)
2013-06-14 06:12

Test now is OSGrid avatar logged onto OSGrid and trying a teleport to Openvue grid....... no errors at all show that way...


R.O.B.U.S.T.#
14:11:01 - [GATEKEEPER SERVICE]: Request to get hyperlink region 9c8b6f8f-8178-4
a69-92dc-9feba4646e6b
14:11:02 - [GATEKEEPER SERVICE]: Login request for Ai Austin @ http://hg.osgrid. [^]
org:80/ (e858df02-a860-4b92-937a-2b87e4ebcd6d) at Openvue using viewer Firestorm
-Release 4.4.0.33720, channel Firestorm-Release, IP 129.215.219.52, Mac 01f7e45f
e8f33f8745ccd9752e13eeaa, Id0 bdae2cb88dc63e929dc131ac61e57054 Teleport Flags 0
14:11:02 - [GATEKEEPER SERVICE]: Verifying http://virtual.aiai.ed.ac.uk:8002 [^] aga
inst http://virtual.aiai.ed.ac.uk:8002 [^]
14:11:02 - [USER AGENT CONNECTOR]: new connector to http://hg.osgrid.org:80/ [^] (ht
tp://64.31.16.122:80/ [^])
14:11:03 - [GATEKEEPER SERVICE]: Identity verified for Ai Austin @ http://hg.osg [^]
rid.org:80/
14:11:03 - [GATEKEEPER SERVICE]: User is OK
14:11:03 - [PRESENCE SERVICE]: LoginAgent e858df02-a860-4b92-937a-2b87e4ebcd6d w
ith session ee7e92df-187d-4b93-8c35-ee068fc3fd31 and ssession 13df2996-780a-4492
-84d7-6de7623eeb62
14:11:03 - [GATEKEEPER SERVICE]: Login presence ok
14:11:03 - [GRID USER SERVICE]: User e858df02-a860-4b92-937a-2b87e4ebcd6d;http:/
/hg.osgrid.org:80/;Ai Austin is online
14:11:03 - [GATEKEEPER SERVICE]: destination ok: Openvue
14:11:03 - [GATEKEEPER SERVICE]: launching agent ViaHGLogin
14:11:05 - [OfflineIM.V2.Handler]: GET

- Issue History
Date Modified Username Field Change
2013-06-14 05:37 aiaustin New Issue
2013-06-14 05:51 BlueWall Note Added: 0024091
2013-06-14 06:06 aiaustin Note Added: 0024092
2013-06-14 06:06 aiaustin Note Edited: 0024092 View Revisions
2013-06-14 06:07 aiaustin Note Edited: 0024092 View Revisions
2013-06-14 06:07 aiaustin Note Edited: 0024092 View Revisions
2013-06-14 06:12 aiaustin Note Added: 0024093


Copyright © 2000 - 2012 MantisBT Group
Powered by Mantis Bugtracker