[Opensim-users] about OpenSim GRID security.

[Diva Canto]

Not sure if this will make it to 0.8, but I recently added HTTP 
authentication to all robust-bound connectors of internal grid services. 
HTTP authentication is not hard security, but it makes it much harder 
for unauthorized accesses to the grid services. (I, too, run a grid with 
simulators in different data centers.)

On 6/2/2014 4:16 PM, David Saunders wrote:
> GRid Security?
>
> Well there is a lacking of  it. I been working on a ways to prevent 
> grids/Simulators to connect to our network.  Its built around allowing 
> sims to authenticate with a configuration server that will open the 
> door for them to connect to the grid services.  But I not found a list 
> of ports that need to open for clients to use,  and been testing a 
> list simulator ports to splite the services from the client to a 
> public set of ports and the simulator a set of private port that can 
> be open when they connect.
>
>  This would be easy if we did not allow trusted remote simulators to 
> connect.
>
> When I asked about security lasst I was given you keep the ports a 
> secret and only give them out to people you trust.
>
> A locked door is moor sure the a unlocked door behind a bush.
>
> David.
>
>
> On Sun, Jun 1, 2014 at 10:16 AM, Shaun T. Erickson <ste at smxy.org 
> <mailto:ste at smxy.org>> wrote:
>
>     A good firewall config will handle much of it.
>
>     -ste
>
>
>     On 6/1/14, 6:29 AM, Luisillo Contepomi wrote:
>
>         I dont know if exist or not this list but I think it would be
>         very interesting.
>         OpenSimulator is a "Alpha" declarated by developers but  I
>         think that
>         the project has enough maturity to start thinking seriously about
>         security.
>
>
>     _______________________________________________
>     Opensim-users mailing list
>     Opensim-users at opensimulator.org
>     <mailto:Opensim-users at opensimulator.org>
>     http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-users
>
>
>
>
> _______________________________________________
> Opensim-users mailing list
> Opensim-users at opensimulator.org
> http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-users

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://opensimulator.org/pipermail/opensim-users/attachments/20140602/6c791ab4/attachment.html>