[Opensim-dev] Problem with User server in grid mode retrieving User Profile

Alan M Webb alan_webb at us.ibm.com
Fri Nov 21 00:13:45 UTC 2008


I believe it exports a service which you can pass the login data you 
received and get an authentication response (true or false). I don't have 
my system up at the moment, so I can't check the details. OpenSim doesn't 
actually use any salt when it stores the password, so that makes it easier 
to handle.

You need one of the grid owners to respond, I use stand-alone pretty much 
exclusively.

Best regards
Alan
-------------------
T.J. Watson Research Center, Hawthorne, NY
1-914-784-7286
alan_webb at us.ibm.com



From:
Impalah <impalah at gmail.com>
To:
opensim-dev at lists.berlios.de
Date:
11/20/2008 06:32 PM
Subject:
Re: [Opensim-dev] Problem with User server in grid mode retrieving User 
Profile



Damn!!!

Then, is there another "clean" way to authenticate an user when using 
xmlrpc calls? (like RemoteAdmin does).

The dirty trick of setting a "master" password in opensim.ini is quite... 
well if I had a "commercial" grid the idea of delivering an unique 
password to everyone who wants to use some services will make me sweat... 
:-(

Thanks for the quick response, Alan



2008/11/21 Alan M Webb <alan_webb at us.ibm.com>

Yes, I stumbled over the same thing too. What I discovered (well actually 
Mic Bowman or John Hurliman): For security reasons, the user server 
suppresses password information in remote requests for user profile 
information. This is deliberate and necessary to preserve the fragile 
shreds of security we currently have. 

Best regards
Alan
-------------------
T.J. Watson Research Center, Hawthorne, NY
1-914-784-7286
alan_webb at us.ibm.com 


From: 
Impalah <impalah at gmail.com> 
To: 
opensim-dev at lists.berlios.de 
Date: 
11/20/2008 06:13 PM 
Subject: 
[Opensim-dev] Problem with User server in grid mode retrieving User 
Profile





Hi:

I'm having a strange problem retrieving user profiles only in GRID mode 
(standalone works ok): the field PasswordHash (I need this field to do a 
xmlrpc authentication) is empty.

I'm using version 0.6, I can't remember the svn release, it's from 1 week 
ago, Windows XP SP3, Net 2.0 and Mysql.

I couldn't find any issue in Mantis so my question is: is this a feature 
for grid mode or something similar?

The code in MySQLUserData.cs is the same for both modes and couldn't find 
any "strange" line in User Server code:

IDbCommand result = dbm.Manager.Query("SELECT * FROM " + m_agentsTableName 
+ " WHERE UUID = ?uuid",
                                                     param);


Any idea?

Greetings
_______________________________________________
Opensim-dev mailing list
Opensim-dev at lists.berlios.de
https://lists.berlios.de/mailman/listinfo/opensim-dev



_______________________________________________
Opensim-dev mailing list
Opensim-dev at lists.berlios.de
https://lists.berlios.de/mailman/listinfo/opensim-dev

_______________________________________________
Opensim-dev mailing list
Opensim-dev at lists.berlios.de
https://lists.berlios.de/mailman/listinfo/opensim-dev


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://opensimulator.org/pipermail/opensim-dev/attachments/20081120/dbb7db7d/attachment-0001.html>


More information about the Opensim-dev mailing list