[Opensim-dev] Mantis#2816 patch and openid

[Hurliman, John]

> -----Original Message-----
> From: opensim-dev-bounces at lists.berlios.de [mailto:opensim-dev- 
> bounces at lists.berlios.de] On Behalf Of James Hughes
> Sent: Sunday, December 14, 2008 4:08 PM
> To: opensim-dev at lists.berlios.de
> Subject: Re: [Opensim-dev] Mantis#2816 patch and openid
> 
> Charles Krinke wrote:
>> We have a patch to add an additional handler for openid into our login
>> stream handlers, an openid.cs file and a .dll to support the beginnings
>> of openid.
>> 
>> As I understand it, this is an optional login method, and as I also
>> understand it, openid is quite common these days. It looks like our
>> various gmail accounts are already openid's.
>> 
>> So, what are the advantages and disadvantages of adding some openid
>> support into OpenSim.
>> 
>> Charles
> 
> More than a convenient login method for a grid, it is probably a first
> step in having a globally acceptable authentication system for use
> with HyperGrid and some of the subsystems that will be distributed
> over time.
> 
> <j> BlueWall


A clarification on the patch, this adds OpenID provider support to user server. It does not turn the user server into an OpenID consumer. I think OpenID grid login is a very interesting discussion that should take place on the mailing list, but what this does is allow you to prove ownership of an avatar on a grid. You could leave a comment on a blog using your avatar identity, for example. The main reason for the patch is to pave the way to building a secure hypergrid. Now that OpenSim is evolving into a federated grid model it's critical to be able to carry identity around the metaverse. I also have a patch for the distributed asset service that authenticates all inventory and asset transactions against the user server and allows whitelisting/blacklisting of foreign grids (will be committed very soon after some cleanup).

John