On Tue, 2006-07-25 at 11:50 +0000, Martin Spott wrote: > "Julien Pierru" wrote: > > > A few questions arise, first what do you guys think about an authentication > > system, second what would be the best way of implementing it within FG and > > third would it be limited to be used by the tracking system or as a way of > > moderating the mp servers. > > Yes, I am 'pro' user authentification or at least "identification" > because sooner or later the multiplayer system won't be feasible > without: Once the MP servers gain more popularity that chances of abuse > increase. > > Erecting a system that simply serves user authentication is not a big > deal and could easily be done using standard procedures. Someone would > set up an LDAP directory and add some simple user management tool where > a group of maintainters could deal with the user requests. The required > client libraries are available on almost _every_ platform and for > example you can easily attach an Apache web server to such a directory. > > In order to prevent user passwords being handled within FlightGear I > propose some cookie-based system where the user registers his user name > and callsign with the authentication server and afterwards recieves a > cookie (sort of a public key). FG now would send the cookie to identify > itself with the MP servers and the MP servers themselves would validate > the cookie with the authentication server. > > Or something like that .... > > Martin.
I Agree that authenticated MP server will need to happen sooner rather than later. As an idea, could we add a section to say what ip addresses range to expect the packets to orginate from. This would help protect the key against being brute forced. This way we may not even need to do the public/private key thing but instead a hash (MD5 perhaps??) of containing the players name and a key phrase of the user's choice. A simple front end would need to be created (Probably web based but cli might work also). Regards -- George Patterson ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ Flightgear-devel mailing list Flightgear-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/flightgear-devel
