<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
+1 good<br>
<br>
Stefan Andersson wrote:
<blockquote cite="mid:BLU134-W388D3888437B818984E87BD5F50@phx.gbl"
type="cite">
<style>
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Verdana
}
</style>I believe, based on quite a few discussions with quite a few
people lately, that it's time we finally started thinking about and
working on the backend architecture.<br>
<br>
I propose we take the same "modularized and malleable" approach that
has been so successful on the region side - which would in effect mean,
<br>
<br>
* an extensible plugin system (Hooking up to events, like in the region)<br>
* support for several authentication sources (As plug-ins)<br>
and <br>
* support for several, co-existing and complementing, client and
backend protocols (I've already suggested that we center on a good set
of 'handlers' that can be re-used - it seems like a good unifying
point.)<br>
<br>
Given that we haven't done much on the servers anyway, I think that
this is an golden opportunity.<br>
<br>
By the way, another good thing with the 'handlers' approach is that
that would, in theory, let you 'assemble' a server process by just
choosing what handlers to register in it, so if you want to separate
login from user (which makes big sense from a security standpoint) you
could just configure two processes.<br>
<br>
Best regards,<br>
Stefan Andersson<br>
Tribal Media AB<br>
<br>
> Date: Mon, 15 Dec 2008 17:11:39 -0800<br>
> From: <a class="moz-txt-link-abbreviated" href="mailto:aerowolf@gmail.com">aerowolf@gmail.com</a><br>
> To: <a class="moz-txt-link-abbreviated" href="mailto:opensim-dev@lists.berlios.de">opensim-dev@lists.berlios.de</a><br>
> Subject: Re: [Opensim-dev] openid (other authentication methods)<br>
> <br>
> Would there be a major problem with allowing an X.509<br>
> client-certificate based authentication system? (No, it won't work<br>
> with the existing Linden client either.)<br>
> <br>
> -Kyle H<br>
> <br>
> On Mon, Dec 15, 2008 at 5:39 AM, James Stallings II<br>
> <a class="moz-txt-link-rfc2396E" href="mailto:james.stallings@gmail.com"><james.stallings@gmail.com></a> wrote:<br>
> > I am not JHurliman, but I have actually given this topic
considerable<br>
> > thought. As I see things, there probably is no way to
incorporate OpenID<br>
> > directly into the existing client.<br>
> ><br>
> > I dont let this concern me overmuch - I think constraining
ourselves to<br>
> > existing client functionality is a certain way to allow our
friends at<br>
> > Linden Labs to remain the defacto industry leaders of this
technology.<br>
> ><br>
> > Now that that is out of the way, there are certain
methodologies that I<br>
> > could employ to put an OpenID capability to work today:<br>
> ><br>
> > Scenario 1: Keep all accounts 'deactivated' by default (even
when they are<br>
> > valid, active accounts), activating them only at such time as
the OpenID<br>
> > authorization method I've embedded into the splash page is
completed. Once<br>
> > that embedded authorization procedure is completed, the
account would be<br>
> > enabled, and login would procede as normally occurs with the
client.<br>
> ><br>
> > Scenario 2: All login procedures as per usual; OpenID kept on
file for for<br>
> > positive identification on an as-needed basis where such
things are<br>
> > relevant: access to mature content, proof of ownership of
assets, resolution<br>
> > of complaints, etc.<br>
> ><br>
> > Scenario 3: External authentication layers that might be
built on top of<br>
> > e.g., Hypergrid or OGP, which cant really be explored at
present because we<br>
> > have no support for authenticating via OpenID.<br>
> ><br>
> > These are just three that occur to me off the top of my head.
I think all<br>
> > represent use cases that are desirable here and now. We
simply lack the<br>
> > tools to implement them at present. All that remains is that
some<br>
> > trailblazing group put the tools in the hands of users.<br>
> ><br>
> > Will we blaze that trail? or will we read about who already
has on the<br>
> > Linden blog?<br>
> ><br>
> > I say +100, get this patch in trunk. ASAP.<br>
> ><br>
> ><br>
> > Cheers<br>
> > James<br>
> ><br>
> ><br>
> > On Mon, Dec 15, 2008 at 7:03 AM, Sean Dague
<a class="moz-txt-link-rfc2396E" href="mailto:sdague@gmail.com"><sdague@gmail.com></a> wrote:<br>
> >><br>
> >> Hurliman, John wrote:<br>
> >> ><br>
> >> > A clarification on the patch, this adds OpenID
provider support to user<br>
> >> > server. It does not turn the user server into an
OpenID consumer. I think<br>
> >> > OpenID grid login is a very interesting discussion
that should take place on<br>
> >> > the mailing list, but what this does is allow you to
prove ownership of an<br>
> >> > avatar on a grid. You could leave a comment on a
blog using your avatar<br>
> >> > identity, for example. The main reason for the patch
is to pave the way to<br>
> >> > building a secure hypergrid. Now that OpenSim is
evolving into a federated<br>
> >> > grid model it's critical to be able to carry
identity around the metaverse.<br>
> >> > I also have a patch for the distributed asset
service that authenticates all<br>
> >> > inventory and asset transactions against the user
server and allows<br>
> >> > whitelisting/blacklisting of foreign grids (will be
committed very soon<br>
> >> > after some cleanup).<br>
> >><br>
> >> Could you explain that authentication flow with the
existing client?<br>
> >> While this patch doesn't hurt anything, I'd really like
to understand<br>
> >> where this is going before we commit something like this.<br>
> >><br>
> >> -Sean<br>
> >><br>
> >> --<br>
> >> Sean Dague / Neas Bade<br>
> >> <a class="moz-txt-link-abbreviated" href="mailto:sdague@gmail.com">sdague@gmail.com</a><br>
> >> <a class="moz-txt-link-freetext" href="http://dague.net">http://dague.net</a><br>
> >><br>
> >><br>
> >><br>
> >> _______________________________________________<br>
> >> Opensim-dev mailing list<br>
> >> <a class="moz-txt-link-abbreviated" href="mailto:Opensim-dev@lists.berlios.de">Opensim-dev@lists.berlios.de</a><br>
> >> <a class="moz-txt-link-freetext" href="https://lists.berlios.de/mailman/listinfo/opensim-dev">https://lists.berlios.de/mailman/listinfo/opensim-dev</a><br>
> >><br>
> ><br>
> ><br>
> ><br>
> > --<br>
> > ===================================<br>
> > The wind<br>
> > scours the earth for prayers<br>
> > The night obscures them<br>
> ><br>
> > <a class="moz-txt-link-freetext" href="http://osgrid.org">http://osgrid.org</a><br>
> > <a class="moz-txt-link-freetext" href="http://del.icio.us/SPQR">http://del.icio.us/SPQR</a><br>
> > <a class="moz-txt-link-freetext" href="http://twitter.com/jstallings2">http://twitter.com/jstallings2</a><br>
> > <a class="moz-txt-link-freetext" href="http://www.linkedin.com/pub/5/770/a49">http://www.linkedin.com/pub/5/770/a49</a><br>
> ><br>
> > _______________________________________________<br>
> > Opensim-dev mailing list<br>
> > <a class="moz-txt-link-abbreviated" href="mailto:Opensim-dev@lists.berlios.de">Opensim-dev@lists.berlios.de</a><br>
> > <a class="moz-txt-link-freetext" href="https://lists.berlios.de/mailman/listinfo/opensim-dev">https://lists.berlios.de/mailman/listinfo/opensim-dev</a><br>
> ><br>
> ><br>
> _______________________________________________<br>
> Opensim-dev mailing list<br>
> <a class="moz-txt-link-abbreviated" href="mailto:Opensim-dev@lists.berlios.de">Opensim-dev@lists.berlios.de</a><br>
> <a class="moz-txt-link-freetext" href="https://lists.berlios.de/mailman/listinfo/opensim-dev">https://lists.berlios.de/mailman/listinfo/opensim-dev</a><br>
<br>
<pre wrap="">
<hr size="4" width="90%">
_______________________________________________
Opensim-dev mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Opensim-dev@lists.berlios.de">Opensim-dev@lists.berlios.de</a>
<a class="moz-txt-link-freetext" href="https://lists.berlios.de/mailman/listinfo/opensim-dev">https://lists.berlios.de/mailman/listinfo/opensim-dev</a>
</pre>
</blockquote>
<br>
<div class="moz-signature">-- <br>
Best regards,<br>
Ideia Boa<br>
OpenSimPT<br>
<br>
Join the new 3D world revolution : <a class="moz-txt-link-freetext" href="http://www.opensimpt.com/">http://www.opensimpt.com/</a></div>
</body>
</html>