[Opensim-dev] ConsoleClient -pass option

Mon Sep 7 02:04:46 UTC 2009

I have to second this motion - XMLRPC in my opinion is a lot better for remote programming than "REST" which doesn't really define the wire formats nor datatypes.

The ICommander interface we are now using on the console really suits XMLRPC well - since we already have a list of defined arguments available, and can build nice remote-access documentation from them automatically.

In addition, we can use the exact same format & arguments as the console commands.

Regards,

Adam

> -----Original Message-----
> From: opensim-dev-bounces at lists.berlios.de [mailto:opensim-dev-
> bounces at lists.berlios.de] On Behalf Of Dickson, Mike (ISS Software)
> Sent: Friday, 4 September 2009 8:05 AM
> To: opensim-dev at lists.berlios.de
> Subject: Re: [Opensim-dev] ConsoleClient -pass option
> 
> Thanks for the pointer Melanie. No I wasn't aware of it.  I'll have a
> look.
> 
> I'm pretty sure I don't agree however that a simple GET/PUT interface
> is somehow just better than (dated!) XML/RPC (or some other protocol
> where the on the wire data types are actually defined). That's creeping
> towards a religious discussion however so I'll drop it. Having the
> console functionality packages separate like this is the important
> "feature" IMO.
> 
> Mike
> 
> -----Original Message-----
> From: opensim-dev-bounces at lists.berlios.de [mailto:opensim-dev-
> bounces at lists.berlios.de] On Behalf Of Melanie
> Sent: Friday, September 04, 2009 9:59 AM
> To: opensim-dev at lists.berlios.de
> Subject: Re: [Opensim-dev] ConsoleClient -pass option
> 
> Have you ever looked at the REST console? That is precisely what it
> does, it removes the local console, enabling the process to run as a
> daemon, and allows remote connections from a console application.
> 
> Only, it doesn't use the (dated) XMLRPC, it uses RESTful requests.
> 
> XMLRPC admin is only available in region servers, and is too limited
> a tool even if "beefed up" to ever replace a console.
> 
> Melanie
> 
> Dickson, Mike (ISS Software) wrote:
> > Right.  That gets around the issue.  BTW, if the server is running
> SNMP or something that gives access to the process list this problem
> can leak outside the local machine.  I don't for sure but I'm guessing
> you could have the same issue in Windows with WMI.
> >
> > IMO, the right answer is to dump the consoles, beef up the XML/RPC
> admin interface and if desired do a separate "console app" that parses
> and sends the XML/RPC to the server.  I've been noodling on that but
> still struggling with a stable config with the new "BUST" architecture.
> >
> > Mike
> >
> > -----Original Message-----
> > From: opensim-dev-bounces at lists.berlios.de [mailto:opensim-dev-
> bounces at lists.berlios.de] On Behalf Of Dr Scofield
> > Sent: Friday, September 04, 2009 3:19 AM
> > To: opensim-dev at lists.berlios.de
> > Subject: Re: [Opensim-dev] ConsoleClient -pass option
> >
> >
> > Dickson, Mike (ISS Software) wrote:
> >> I'd agree with Dave on this one.  Just a simple long ps listing gets
> you the password if its on cleartext on the command line.  At least the
> file can be locked down via permissions.  A password on the command
> line is pretty much insecure. Might as well not have one.
> >
> > ...unless you rewrite argv (which is standard practise for stuff like
> that).
> >
> > 	DrS/dirk
> >
> >>
> >> Mike
> >>
> >> -----Original Message-----
> >> From: opensim-dev-bounces at lists.berlios.de [mailto:opensim-dev-
> bounces at lists.berlios.de] On Behalf Of Melanie
> >> Sent: Thursday, September 03, 2009 10:02 PM
> >> To: opensim-dev at lists.berlios.de
> >> Subject: Re: [Opensim-dev] ConsoleClient -pass option
> >>
> >> It's choosing the lesser evil.
> >>
> >> Melanie
> >>
> >>
> >> Dave Coyle wrote:
> >>> On Thursday 03 September 2009 03:00:46 pm  wrote:
> >>>> commit 6b70b5709913e9734f5864560e997b34dfd58b85
> >>>> Author: Justin Clark-Casey (justincc) <jjustincc at googlemail.com>
> >>>> Date:   Thu Sep 3 20:00:18 2009 +0100
> >>>>
> >>>>     * Add extra warning about using -pass in
> >>>> OpenSim.ConsoleClient.ini.example
> >>>>
> >>>> <...>
> >>>>
> >>>> +    ; Please be aware that this is not secure since the password
> is in the
> >>>> clear +    ; we recommend the use of -pass wherever possible
> >>>>      ;pass = secret
> >>>
> >>> Is the password not also in the clear, visible to any local user
> who does a
> >>> 'ps', if you use the -pass switch?  Access to
> OpenSim.ConsoleClient.ini can at
> >>> least be restricted to specific user(s).  I don't see how -pass is
> the lesser
> >>> of the two evils.
> >>>
> >>> -coyled
> >>>
> >>>
> >>> -------------------------------------------------------------------
> -----
> >>>
> >>> _______________________________________________
> >>> Opensim-dev mailing list
> >>> Opensim-dev at lists.berlios.de
> >>> https://lists.berlios.de/mailman/listinfo/opensim-dev
> >> _______________________________________________
> >> Opensim-dev mailing list
> >> Opensim-dev at lists.berlios.de
> >> https://lists.berlios.de/mailman/listinfo/opensim-dev
> >> _______________________________________________
> >> Opensim-dev mailing list
> >> Opensim-dev at lists.berlios.de
> >> https://lists.berlios.de/mailman/listinfo/opensim-dev
> >
> >
> _______________________________________________
> Opensim-dev mailing list
> Opensim-dev at lists.berlios.de
> https://lists.berlios.de/mailman/listinfo/opensim-dev
> _______________________________________________
> Opensim-dev mailing list
> Opensim-dev at lists.berlios.de
> https://lists.berlios.de/mailman/listinfo/opensim-dev