<div dir="ltr">OK, I can understand that,<br><br>you can change the OpenSim.ini.example like,<br>add the following line inside [Network] section (just under inventory_server_url):<br>;secure_inventory_server = true<br>you should keep the line commented, because by default its value is "true"<br>
<br>We(Johan, Mikem, lulurun) discussed about this, "secure_inventory_server" is just a "bridge"<br>for the people who are running latest regionserver, but using old revisions of UGAI.<br><br>as the revision number grows, we want to delete this option in the short future.<br>
<br>\\\\<br><div class="gmail_quote">2008/7/25 Charles Krinke <<a href="mailto:cfk@pacbell.net">cfk@pacbell.net</a>>:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div><div style="font-family: arial,helvetica,sans-serif; font-size: 12pt;"><div style="font-family: arial,helvetica,sans-serif; font-size: 12pt;">Thanks, Lulurun. That helps some.<br><br>I believe the concern I have is the support of our users on the #opensim IRC channel. If there are settings to OpenSim that are *not* in OpenSim.ini.example and someone sets them, then support gets more difficult.<br>
<br>At this point, I am merely trying to suggest that any config settings that anyone might use be entered in OpenSim.ini.example. Additionally a couple of comments that describe when one might want to use these settings would help our users move forward.<br>
<font color="#888888"><br>Charles</font><div><div></div><div class="Wj3C7c"><br><br><div style="font-family: times new roman,new york,times,serif; font-size: 12pt;">----- Original Message ----<br>From: liu xiaolu <<a href="mailto:lulurun@gmail.com" target="_blank">lulurun@gmail.com</a>><br>
To: <a href="mailto:opensim-dev@lists.berlios.de" target="_blank">opensim-dev@lists.berlios.de</a><br>Sent: Thursday,
July 24, 2008 8:04:24 PM<br>Subject: Re: [Opensim-dev] secure_inventory_server ??<br><br>
<div dir="ltr">That option is avaliable from 5592, it is just a temporary thing.<br><br>To explain the situation simply:<br>1. old inventory server accepts any request without check the use identity, this causes a problem that everyone's inventory information can be easily modified by other people who even do not know your password.<br>
2. secure_inventory_server accepts request by checking a valid session_id, so every inventory request needs to be attached a session_id.<br>3. then both of the regionserver and the inventoryserver have to be changed:<br>
3.1 regionserver adds user's "session_id" to inventory CRUD requests<br>
3.2 secureinventoryserver expects the request data contains a "session_id"<br>4. so the latest regionserver do not work with non-secure inventoryserver any more.<br><br>the option enables people who are using the latest regionserver, but want to connect to a non-secure inventoryserver - they can set "use_secure_invnetory" to false in OpenSim.ini<br>
<br><br><div class="gmail_quote">2008/7/25 Charles Krinke <<a rel="nofollow" href="mailto:cfk@pacbell.net" target="_blank">cfk@pacbell.net</a>>:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div><div style="font-family: arial,helvetica,sans-serif; font-size: 12pt;"><div style="font-family: arial,helvetica,sans-serif; font-size: 12pt;">I am hearing about a new OpenSim.ini setting called secure_inventory_server and am told it is not in OpenSim.ini.example. I believe all settings for OpenSim should be in OpenSim.ini and have a default, which in this case could be either true, or false, I would think.<br>
<br>Can someone please help us understand what this setting is, what it does when set to false, what it does when set to true and perhaps consider adding at least a default for this setting in OpenSim.ini.example?<br><font color="#888888"><br>
Charles<br></font></div></div></div><br>_______________________________________________<br>
Opensim-dev mailing list<br>
<a rel="nofollow" href="mailto:Opensim-dev@lists.berlios.de" target="_blank">Opensim-dev@lists.berlios.de</a><br>
<a rel="nofollow" href="https://lists.berlios.de/mailman/listinfo/opensim-dev" target="_blank">https://lists.berlios.de/mailman/listinfo/opensim-dev</a><br>
<br></blockquote></div><br><br clear="all"><br>-- <br>Lulurun
</div>
</div></div></div></div></div></div><br>_______________________________________________<br>
Opensim-dev mailing list<br>
<a href="mailto:Opensim-dev@lists.berlios.de">Opensim-dev@lists.berlios.de</a><br>
<a href="https://lists.berlios.de/mailman/listinfo/opensim-dev" target="_blank">https://lists.berlios.de/mailman/listinfo/opensim-dev</a><br>
<br></blockquote></div><br><br clear="all"><br>-- <br>Lulurun
</div>