[Opensim-dev] Problem with User server in grid mode retrieving User Profile

[Frisby, Adam]

Uhh it should be salted.

There's a passwordSalt field for a reason.

Adam

From: opensim-dev-bounces at lists.berlios.de [mailto:opensim-dev-bounces at lists.berlios.de] On Behalf Of Alan M Webb
Sent: Thursday, 20 November 2008 4:14 PM
To: opensim-dev at lists.berlios.de
Subject: Re: [Opensim-dev] Problem with User server in grid mode retrieving User Profile


I believe it exports a service which you can pass the login data you received and get an authentication response (true or false). I don't have my system up at the moment, so I can't check the details. OpenSim doesn't actually use any salt when it stores the password, so that makes it easier to handle.

You need one of the grid owners to respond, I use stand-alone pretty much exclusively.

Best regards
Alan
-------------------
T.J. Watson Research Center, Hawthorne, NY
1-914-784-7286
alan_webb at us.ibm.com

From:

Impalah <impalah at gmail.com>

To:

opensim-dev at lists.berlios.de

Date:

11/20/2008 06:32 PM

Subject:

Re: [Opensim-dev] Problem with User server in grid mode retrieving        User Profile


________________________________



Damn!!!

Then, is there another "clean" way to authenticate an user when using xmlrpc calls? (like RemoteAdmin does).

The dirty trick of setting a "master" password in opensim.ini is quite... well if I had a "commercial" grid the idea of delivering an unique password to everyone who wants to use some services will make me sweat... :-(

Thanks for the quick response, Alan



2008/11/21 Alan M Webb <alan_webb at us.ibm.com<mailto:alan_webb at us.ibm.com>>

Yes, I stumbled over the same thing too. What I discovered (well actually Mic Bowman or John Hurliman): For security reasons, the user server suppresses password information in remote requests for user profile information. This is deliberate and necessary to preserve the fragile shreds of security we currently have.

Best regards
Alan
-------------------
T.J. Watson Research Center, Hawthorne, NY
1-914-784-7286
alan_webb at us.ibm.com<mailto:alan_webb at us.ibm.com>
From:

Impalah <impalah at gmail.com<mailto:impalah at gmail.com>>

To:

opensim-dev at lists.berlios.de<mailto:opensim-dev at lists.berlios.de>

Date:

11/20/2008 06:13 PM

Subject:

[Opensim-dev] Problem with User server in grid mode retrieving User        Profile


________________________________




Hi:

I'm having a strange problem retrieving user profiles only in GRID mode (standalone works ok): the field PasswordHash (I need this field to do a xmlrpc authentication) is empty.

I'm using version 0.6, I can't remember the svn release, it's from 1 week ago, Windows XP SP3, Net 2.0 and Mysql.

I couldn't find any issue in Mantis so my question is: is this a feature for grid mode or something similar?

The code in MySQLUserData.cs is the same for both modes and couldn't find any "strange" line in User Server code:

IDbCommand result = dbm.Manager.Query("SELECT * FROM " + m_agentsTableName + " WHERE UUID = ?uuid",
                                                    param);


Any idea?

Greetings
_______________________________________________
Opensim-dev mailing list
Opensim-dev at lists.berlios.de<mailto:Opensim-dev at lists.berlios.de>
https://lists.berlios.de/mailman/listinfo/opensim-dev



_______________________________________________
Opensim-dev mailing list
Opensim-dev at lists.berlios.de<mailto:Opensim-dev at lists.berlios.de>
https://lists.berlios.de/mailman/listinfo/opensim-dev

_______________________________________________
Opensim-dev mailing list
Opensim-dev at lists.berlios.de
https://lists.berlios.de/mailman/listinfo/opensim-dev

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://opensimulator.org/pipermail/opensim-dev/attachments/20081120/9bbe6667/attachment-0001.html>