[Opensim-dev] secure_inventory_server ??

[liu xiaolu]

>If you have an userserver url in some db in the inventory server, then this
needs updating when a user changes grids

this depends on what exactly "change grid" means:

1. if it means user registers at GridService1 and want to login to a
regionserver at GridService2, THEN
That is my point, and I think that is the point maybe I did described
clearly:
just for "grid jump", *** user need not to change its grids(here means
userserver_url)***
user can only register in one gridservice(userserver), and he can keep its
account there forever, and the user still can travel to other gridservices.
[avatar portability mechanism:]
because when the an user login to a "foreign region" in other gridservice
* the user tells the "foreign region" to claim its identity from its
original userserver.
* the user tells the "foreign region" to bring its belongings into the
world(appearance, inventory).
In this case "userserver_dictionary" *need not to be updated*

2. if it means: user register another account at another gridservice. like
today I have been using hotmail, and now I am using gmail. THEN
* if the user cares about his/her belongings, by using the portability
mechanism I methioned in 1, the user can still use his/her previous
  inventory/asset service, because inventory/asset server are independent.,
in this case, yes, "userserver_dictionary" *need to be updated*,
  (to set userserver_url point to current userservice) but this kind of
"change" won't be frequent, like today, how many free mail accounts
  are you "really" using, or how many times you changes your mail account ?
* if the user want to start a new life, maybe he/she does not mind start
from "zero", like today I switch to gmail, I can not read my past
  mails in hotmail in gmail. why I change to gmail? because my hotmail is
full with spam, I donot want to clean it.

regards,
lulurun

2008/7/25 Michael Wright <michaelwri22 at yahoo.co.uk>:

> Well no, as each user should have a inventory server url in their
> userprofile db. So that is looked up and the login server then asks for
> permission on the inventory server to access a users inventory and to push
> the session id. So yes you need to set up permissions on the inventory
> server to allow the various "grids" to access a users inventory.
>
> But as there could be multiple grids authorised for a user, it allows the
> user to login and out of those grids while keeping the same inventory. If
> you have a userserver url in some db in the inventory server, then this
> needs updating when a user changes grids (or if multiple urls were saved,
> then the active one needs setting). And it certainly shouldn't have to be
> done manually so again it requires a push.
>
> *liu xiaolu <lulurun at gmail.com>* wrote:
>
> Comparing "pull" and "push", I would like to say:
> pull is "require setting a lot of urls on different servers anyway", but
> push is full with vulnerability.
>
>
> ------------------------------
> Not happy with your email address?
>  Get the one you really want <http://uk.docs.yahoo.com/ymail/new.html> -
> millions of new email addresses available now at Yahoo!<http://uk.docs.yahoo.com/ymail/new.html>
>
> _______________________________________________
> Opensim-dev mailing list
> Opensim-dev at lists.berlios.de
> https://lists.berlios.de/mailman/listinfo/opensim-dev
>
>


-- 
Lulurun
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://opensimulator.org/pipermail/opensim-dev/attachments/20080726/3a9df258/attachment-0001.html>