We might also want to add a temporary config setting to the inventory server to turn the security off. For people who want to update the server, but could have old regions on the grid.<br><br><b><i>liu xiaolu <lulurun@gmail.com></i></b> wrote:<blockquote class="replbq" style="border-left: 2px solid rgb(16, 16, 255); margin-left: 5px; padding-left: 5px;"> <div dir="ltr">OK, I can understand that,<br><br>you can change the OpenSim.ini.example like,<br>add the following line inside [Network] section (just under inventory_server_url):<br>;secure_inventory_server = true<br>you should keep the line commented, because by default its value is "true"<br> <br>We(Johan, Mikem, lulurun) discussed about this, "secure_inventory_server" is just a "bridge"<br>for the people who are running latest regionserver, but using old revisions of UGAI.<br><br>as the revision number grows, we want to delete this option in the short future.<br> <br>\\\\<br><div class="gmail_quote">2008/7/25
Charles Krinke <<a href="mailto:cfk@pacbell.net">cfk@pacbell.net</a>>:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> <div><div style="font-family: arial,helvetica,sans-serif; font-size: 12pt;"><div style="font-family: arial,helvetica,sans-serif; font-size: 12pt;">Thanks, Lulurun. That helps some.<br><br>I believe the concern I have is the support of our users on the #opensim IRC channel. If there are settings to OpenSim that are *not* in OpenSim.ini.example and someone sets them, then support gets more difficult.<br> <br>At this point, I am merely trying to suggest that any config settings that anyone might use be entered in OpenSim.ini.example. Additionally a couple of comments that describe when one might want to use these settings would help our users move forward.<br> <font color="#888888"><br>Charles</font><div><div></div><div class="Wj3C7c"><br><br><div style="font-family:
times new roman,new york,times,serif; font-size: 12pt;">----- Original Message ----<br>From: liu xiaolu <<a href="mailto:lulurun@gmail.com" target="_blank">lulurun@gmail.com</a>><br> To: <a href="mailto:opensim-dev@lists.berlios.de" target="_blank">opensim-dev@lists.berlios.de</a><br>Sent: Thursday, July 24, 2008 8:04:24 PM<br>Subject: Re: [Opensim-dev] secure_inventory_server ??<br><br> <div dir="ltr">That option is avaliable from 5592, it is just a temporary thing.<br><br>To explain the situation simply:<br>1. old inventory server accepts any request without check the use identity, this causes a problem that everyone's inventory information can be easily modified by other people who even do not know your password.<br> 2. secure_inventory_server accepts request by checking a valid session_id, so every inventory request needs to be attached a session_id.<br>3. then both of the regionserver and the inventoryserver have to be changed:<br> 3.1 regionserver adds
user's "session_id" to inventory CRUD requests<br> 3.2 secureinventoryserver expects the request data contains a "session_id"<br>4. so the latest regionserver do not work with non-secure inventoryserver any more.<br><br>the option enables people who are using the latest regionserver, but want to connect to a non-secure inventoryserver - they can set "use_secure_invnetory" to false in OpenSim.ini<br> <br><br><div class="gmail_quote">2008/7/25 Charles Krinke <<a rel="nofollow" href="mailto:cfk@pacbell.net" target="_blank">cfk@pacbell.net</a>>:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> <div><div style="font-family: arial,helvetica,sans-serif; font-size: 12pt;"><div style="font-family: arial,helvetica,sans-serif; font-size: 12pt;">I am hearing about a new OpenSim.ini setting called secure_inventory_server and am told it is not in OpenSim.ini.example. I believe all settings
for OpenSim should be in OpenSim.ini and have a default, which in this case could be either true, or false, I would think.<br> <br>Can someone please help us understand what this setting is, what it does when set to false, what it does when set to true and perhaps consider adding at least a default for this setting in OpenSim.ini.example?<br><font color="#888888"><br> Charles<br></font></div></div></div><br>_______________________________________________<br> Opensim-dev mailing list<br> <a rel="nofollow" href="mailto:Opensim-dev@lists.berlios.de" target="_blank">Opensim-dev@lists.berlios.de</a><br> <a rel="nofollow" href="https://lists.berlios.de/mailman/listinfo/opensim-dev" target="_blank">https://lists.berlios.de/mailman/listinfo/opensim-dev</a><br> <br></blockquote></div><br><br clear="all"><br>-- <br>Lulurun </div> </div></div></div></div></div></div><br>_______________________________________________<br> Opensim-dev mailing list<br> <a
href="mailto:Opensim-dev@lists.berlios.de">Opensim-dev@lists.berlios.de</a><br> <a href="https://lists.berlios.de/mailman/listinfo/opensim-dev" target="_blank">https://lists.berlios.de/mailman/listinfo/opensim-dev</a><br> <br></blockquote></div><br><br clear="all"><br>-- <br>Lulurun </div> _______________________________________________<br>Opensim-dev mailing list<br>Opensim-dev@lists.berlios.de<br>https://lists.berlios.de/mailman/listinfo/opensim-dev<br></blockquote><br><p>
<hr size=1>
Not happy with your email address?
<br> <a href="http://uk.docs.yahoo.com/ymail/new.html"> Get the one you
really want</a> - millions of new email addresses available now at <a
href="http://uk.docs.yahoo.com/ymail/new.html"> Yahoo!</a>