[Opensim-dev] Authentication and oAuth

2009-03-01 Thread Tommi Laukkanen
Hello Everyone who is interested in authentication should check this out: http://oauth.net/core/1.0/ Looks well established standard which does OpenId+Tokens and is getting adopted in web industry. What do you think? regards, Tommi ___ Opensim-dev

Re: [Opensim-dev] Authentication and oAuth

2009-03-01 Thread Tommi Laukkanen
It looks like OpenId Authentication 2.0 has similar functionality: http://openid.net/specs/openid-authentication-2_0.html regards, Tommi On Sun, Mar 1, 2009 at 4:42 PM, Tommi Laukkanen tommi.s.e.laukka...@gmail.com wrote: Hello Everyone who is interested in authentication should check this

Re: [Opensim-dev] Virtual World Educators Conference

2009-03-01 Thread Charles Krinke
Dear Rich: On OSGrid is a region called Metaversity Campus, which was recently created by BlueWall Slade for the purpose of virtual education. Another region currently being used for education on OSGrid is Dradis. Additionally, there are a number of UC Irvine regions. You might find it

Re: [Opensim-dev] Virtual World Educators Conference

2009-03-01 Thread Rich White
Sorry .. that should read Opensim .. getting my Open's mixed up *LOL* On Sun, Mar 1, 2009 at 11:14 AM, Rich White rich.lynn.wh...@gmail.com wrote: For those interested - We will be hosting a virtual world educators conference at Pittsburg State University (Dept. of Education building)  in the

Re: [Opensim-dev] Authentication and oAuth

2009-03-01 Thread Diva Canto
Tommil, Thanks for the pointers about OAuth. I think this is really important. We need to figure out what security scheme works best for open Virtual Worlds. I don't necessarily think that we need to tie OpenSim to one specific scheme, but we really need to figure out what the user

Re: [Opensim-dev] Authentication and oAuth

2009-03-01 Thread Tommi Laukkanen
Hi Diva Thanks for the analysis. I have to admit I have only fastly scanned the oAuth spec. They advertise that it works for desktop applications so I assume it should not necessarily be too complex for the end user and not too hard to implement either. Someone would need to study / poc it or get

Re: [Opensim-dev] Authentication and oAuth

2009-03-01 Thread Tommi Laukkanen
Thanks :) I stand corrected On Sun, Mar 1, 2009 at 8:27 PM, Diva Canto d...@metaverseink.com wrote: Just to keep the record straight, the Capabilities concept is about 50 years old. It was devised at about the same time as ACLs. For a number of reasons, ACLs have dominated the field. See here

Re: [Opensim-dev] Authentication and oAuth

2009-03-01 Thread Diva Canto
There's also a very nice paper about it here. http://srl.cs.jhu.edu/pubs/SRL2003-02.pdf Tommi Laukkanen wrote: Thanks :) I stand corrected On Sun, Mar 1, 2009 at 8:27 PM, Diva Canto d...@metaverseink.com mailto:d...@metaverseink.com wrote: Just to keep the record straight, the

Re: [Opensim-dev] Authentication and oAuth

2009-03-01 Thread Diva Canto
I strongly recommend reading that paper I sent the reference to. The cool thing about CAPs on the web (and the reason why I'm excited about it, after knowing _of_ CAPs for 20 years and never really getting them) is that CAPs are URLs that can come and go dynamically. Most of the CAPs

[Opensim-dev] Existing CAPs

2009-03-01 Thread Diva Canto
I'm trying to understand what exactly *we* are doing wrt CAPs. I'm a bit confused. Here's the list of all capabilities I see in the code: EventQueueGet http://sim/CAPS/EQG/random uuid ObjectAdd http://sim/CAPS/OA/random uuid RemoteParcelRequest http://sim/CAPS/caps seed0009/ MapLayer

Re: [Opensim-dev] Existing CAPs

2009-03-01 Thread MW
I don't know about the snapshot one because I haven't actually looked to see what CAPS the client is requesting lately. But the others are caps services that the client requests (or at least used to). As you know when the client first connects it makes a request to the caps seed that it was

Re: [Opensim-dev] Existing CAPs

2009-03-01 Thread Diva Canto
I found this page: http://wiki.secondlife.com/wiki/Current_Sim_Capabilities Which, not surprisingly, is not entirely in sync with what we have in the code. ObjectAdd is not there, and there are many on that list that we don't have. But the PublicSnapshotDataInfo is still a mystery. MW

Re: [Opensim-dev] Authentication and oAuth

2009-03-01 Thread Tommi Laukkanen
Good morning Here are some engineering concerns I see with CAPS URLs: 1) If client is given CAPS URL to access something we need to have access list / ownership and user role information in the database to deduce if the user has the right for capabilities he/she is requesting for. CAPS URLs do