[Opensim-dev] Security on Opensim

[liu xiaolu]

"Banning user" is a necessary function, but it should not be *ONLY*
centralized in GridServer.
we should also build "banning" functions inside RegionServer since
RegionServer owners may have different dislikes.

This is quite similar to region registration:
RegionServer keeps Regions/*.xml, when it online/offline, RegionServer tell
GridServer to update/delete itself.

So, each RegionServer can also hold a file like "Users/blacklist.txt", it
contains the list of user name.
when "expect_user" called, RegionServer checks its own list.

The "banning list" should have different scopes - 0:per region; 1:per grid;
the balck list file maybe like:
  test user 0(per region)
  lulu run 1(per grid)
"per region" banning is done by checking a local list during "expect_user"
"per grid" banned user should be banned and report to GridServer.
Of course GridServer should not put the reported user name into gridwide
blacklist(region onwer maybe a bad person).
there should be a mechanism for determine bad users in GridServer. (a user
is reported by more than 5 different RegionServer)

lulurun,
regards

2008/6/22 Cityworld <cityworld at gmx.de>:

>  Since a few days the Griefers called Patriotic Nigras started to attack
> Opensim Grids
> Osgrid is now attacked a few Days with bad attacks and we have no function
> to ban a user or either kick a user gridwide, so i thought about a method to
> ban a user from any console where the consoles server is allowed to have
> gridwide admin status
>
> look on my demonstration pic, that would work fine to kick a user or ban a
> user gridwide:
>
> http://xionx.de/bannuser.jpg
>
> an admin enters on a granted console the command, then the command runs
> through the gridserver and in the main database it will be checked if that
> consoles server is allowed to kick or ban users gridwide.
>
> _______________________________________________
> Opensim-dev mailing list
> Opensim-dev at lists.berlios.de
> https://lists.berlios.de/mailman/listinfo/opensim-dev
>
>


-- 
Lulurun
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://opensimulator.org/pipermail/opensim-dev/attachments/20080622/d5471dff/attachment-0001.html>