[Opensim-users] Login problem

Sat Dec 1 13:38:39 UTC 2012

Hi Laurent,

Diva wrote a post some time back that really helped me better understand
how hypergrid networking actually works, and why there are sometimes issues
with logging in on hypergrid enabled grids.  Pasting the message below for
convenience and anyone who wants to read the full thread, will include the
link below:

Diva Canto Reply | Threaded | More
Apr 11, 2012; 1:13pm Re: Any way to display the values of "IP" and "MyIP"

The higher-order bit of what I'm about to say is that OpenSim networking
is a complicated matter. Hypergrid networking adds even more complexity
to it. Having said that, let me explain a bit.

The main source of problems arise when you have the following situation:
(1) the servers are on a given network
(2) some clients are also on that network
(3) some clients are on external networks
This is usually the case with universities, for example, depending on
how the university network is set up. Hence you need to be extra careful.

The Hypergrid performs several checks for ensuring identity security.
These checks are based on the domain names that the grids use, on the IP
addresses of the robust servers and on the IP addresses of the clients.

The IP address from where the client logged in is the vital piece of
info that needs to be asserted throughout HG teleports. The user's home
grid knows that address; the simulators that the user visit also know
that address. In order for those simulators to make sure that the agent
that they're getting is the real thing, and not a fake pretending to be
a certain user, they call back to the user's home grid for IP
verification. That's when that debug message gets printed out.

Two things can happen: either the IP address of the client that the
destination simulator gets is exactly the same as the IP address that
the home grid saw at client login (normal case, when servers and clients
are on separate networks) or the IP address of the client that the
destination simulator gets is different than the one seen at login in
the home grid, but is the same as the robust server -- which means that
the client logged in in the same machine where the robust server runs.
This happens in standalones ran at people's homes, for example, where
there's just on box running both OpenSim and the viewer.

So, what does this mean for people with  a mix of clients inside the
server-side network and clients outside?

First of all, stick to using domain names, not IP addresses. That is
just bound to cause problems, because many times the IP addresses seen
from the outside are different from the IP addresses seen from the
inside of a network. If you fix it for one case, you screw it up for the
other. So, rule #1: USE DOMAIN NAMES in the Robust configuration.

Second, use the hosts files to adjust the mappings between domain names
and IP addresses inside the network if needed.

I am sure that this process of IP verification can be improved to
account for these hybrid setups, but for the time being only the
simplest of cases is accounted for (client logged in in the same machine
as the home grid).

Link to the full thread at:
http://opensim-users.2152040.n2.nabble.com/Any-way-to-display-the-values-of-quot-IP-quot-and-quot-MyIP-quot-td7456408.html

Sincerely,

- Chris/Fleep

Chris M. Collins (SL/OS: Fleep Tuque)
Center for Simulations & Virtual Environments Research (UCSIM)
UCIT Instructional & Research Computing
University of Cincinnati
406A Zimmer Hall
315 College Drive
PO BOX 210088
Cincinnati, OH 45221-0088
chris.collins at uc.edu
(513) 556-3018

http://ucsim.uc.edu

On Sat, Dec 1, 2012 at 3:42 AM, Laurent Bechir
<laurent.bechir at madonie.org>wrote:

> I've removed the Hypergrid option and login works. So I guess the problem
> is here.
>
> Envoyé de mon iPhone
>
> Le 30 nov. 2012 à 22:46, laurent.bechir at madonie.org a écrit :
>
> >
> > Hello,
> >
> > I've moved my sim to another server and now I get this error when I try
> to login :
> >
> > 22:32:23 - [GATEKEEPER SERVICE]: Verifying http://masim.madonie.org:9000against
> http://masim.madonie.org:9000
> > 22:32:23 - [USER AGENT SERVICE]: Verifying agent token
> http://masim.madonie.org:9000/;5d1b9926-db9c-46d2-9520-b91b99fedf25against
> http://masim.madonie.org:9000/;5d1b9926-db9c-46d2-9520-b91b99fedf25
> > 22:32:23 - [GATEKEEPER SERVICE]: Identity verified for Laurent Bechir @
> http://masim.madonie.org:9000/
> > 22:32:23 - [GATEKEEPER SERVICE]: User is ok
> > 22:32:23 - [GATEKEEPER SERVICE]: Login presence ok
> > 22:32:23 - [GATEKEEPER SERVICE]: destination ok: AlaFolie
> > 22:32:23 - [GATEKEEPER SERVICE]: launching agent ViaLogin
> > 22:32:23 - [USER AGENT SERVICE]: Unable to login user Laurent Bechir to
> grid http://masim.madonie.org:9000/, reason: Failed to verify user
> presence in the grid for Laurent Bechir, access denied to region AlaFolie.
> > 22:32:23 - [GRID SERVICE]: Fallback returned 0 regions
> > 22:32:23 - [PRESENCE SERVICE]: Session
> a6b25ba9-8fbd-49c7-83c9-81c73a7a6b97 logout
> > 22:32:23 - [LLOGIN SERVICE]: Login failed, reason: Failed to verify user
> presence in the grid for Laurent Bechir, access denied to region AlaFolie.
> >
> > I use hypergrid. Could it be related to that ? I have opens 0.7.2 on
> Ubuntu.
> >
> > How can I fix that ?
> >
> > Thank you
> > _______________________________________________
> > Opensim-users mailing list
> > Opensim-users at lists.berlios.de
> > https://lists.berlios.de/mailman/listinfo/opensim-users
> _______________________________________________
> Opensim-users mailing list
> Opensim-users at lists.berlios.de
> https://lists.berlios.de/mailman/listinfo/opensim-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://opensimulator.org/pipermail/opensim-users/attachments/20121201/d176e0fb/attachment.html>