<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
+1 here too.<br>
<br>
Authentication is something that is critically missing from the
hypergrid right now. I think this patch is the beginning of making
things more secure in a globally decentralized environment. <br>
<br>
I don't know the details of the OpenID protocol, and I don't know how
it compares to other authentication protocols, if we had to choose. But
I really like that this makes UGAIM *providers*, not consumers, of
authentication services. So if I have my HG standalone at
home.smopr.com, I can use my account here, and other services can check
that this account exists with my UGAIM. From then on, they can decide
whether to authorize me or not.<br>
<br>
I dislike the idea of just a handful of identity services on the entire
web. Let's have a million. Trust then becomes more aligned with the
social lines of trust.<br>
<br>
Crista<br>
<br>
Justin Clark-Casey wrote:
<blockquote cite="mid:4947E2B3.1070808@googlemail.com" type="cite">
<pre wrap="">Mic Bowman wrote:
</pre>
<blockquote type="cite">
<pre wrap="">inventory & asset server extensions that leverage openid will be
posted on the distributed asset forge project soon. we're working to
validate the concepts in the forge project & then start carving the
changes up into smaller chunks for incremental patching once we've
convinced ourselves that this is useful. the openid parts are pretty
fundamental to making any of these external services work so it seemed
like a good starting point.
</pre>
</blockquote>
<pre wrap=""><!---->
Personally, I'm inclined to say +1 to the OpenID user server patch. It's fairly small and provides functionality that
is generally useful. Having it in core will also make it easier to experiment and think about the distributed services
that John and any others are developing.
Perhaps this would be more ideal as a module, but a module system would have to be put in place first. The wait could
be quite long (though I'm happy to be proven wrong :)
</pre>
<blockquote type="cite">
<pre wrap="">--mic
On Mon, Dec 15, 2008 at 2:23 PM, Sean Dague <a class="moz-txt-link-rfc2396E" href="mailto:sdague@gmail.com"><sdague@gmail.com></a> wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Mic Bowman wrote:
</pre>
<blockquote type="cite">
<pre wrap="">So this is really an API that can be used to apply the set of
identities managed by the user server to other services. A couple more
places this could be useful... the web interfaces like opensimwi
currently manipulate the database directly in order to perform
authentication for account management. Also, the Alan's REST
interfaces for asses & inventory on the region server currently cannot
authenticate a specific user in grid mode (there is no API & the User
server does not hand out the hashed password to the region server in
grid mode).
The choice of OpenID vs some other API is really just a choice to
support a fairly standard API rather than invent something new.
</pre>
</blockquote>
<pre wrap="">Ok, so this is about exposing the OpenSim data to things other than the
client. That makes a bit more sense from what I saw in the patch.
It would be nice to see an example of how this would be used in the
OpenSim Inventory server, for instance. But I see how this could be a
good first step in that direction.
-Sean
--
Sean Dague / Neas Bade
<a class="moz-txt-link-abbreviated" href="mailto:sdague@gmail.com">sdague@gmail.com</a>
<a class="moz-txt-link-freetext" href="http://dague.net">http://dague.net</a>
_______________________________________________
Opensim-dev mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Opensim-dev@lists.berlios.de">Opensim-dev@lists.berlios.de</a>
<a class="moz-txt-link-freetext" href="https://lists.berlios.de/mailman/listinfo/opensim-dev">https://lists.berlios.de/mailman/listinfo/opensim-dev</a>
</pre>
</blockquote>
<pre wrap="">_______________________________________________
Opensim-dev mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Opensim-dev@lists.berlios.de">Opensim-dev@lists.berlios.de</a>
<a class="moz-txt-link-freetext" href="https://lists.berlios.de/mailman/listinfo/opensim-dev">https://lists.berlios.de/mailman/listinfo/opensim-dev</a>
</pre>
</blockquote>
<pre wrap=""><!---->
</pre>
</blockquote>
<br>
</body>
</html>