Authentication Flow
Protocol Step-by-step
Step 1
Viewer(client)--------->User Server
- Secure Message checksum request - Protocol Level Supported? Yes/No.
- Port 12036
Step 2
Viewer -----------> Login Server
- XML-RPC Func call - over HTTPS. to login. (Blocking) [[1][Login Info from libsecondlife]
- Mostly a web server (Apache) that talks to a SQL DB. Gets user info from DB (home. etc.) gets the info about which sim to connect to (IP address etc.) and drops the connection.
- First name, last name, MD5(password), viewer version, requested location
Step 3
Login Server ------> Database
Checks actual database for authentication credentials
Step 4
Login Server------> SIM in the Grid
- Login server decides which SIM to send the viewer to. talks to Grid
- Requests session start
Grid (of Simulators):
- inbound UDP port (for comm. with Viewer) 12035, 13000-13050
Step 5
SIM ----> Login server (response)
- Verification that user is allowed on the SIM
Step 6
Login server ------> Viewer (response)
- Information returned: agent id, session id, secure session id, sim ip, sim port, global location, some inventory info.
- Most IDs are UUIDs (agent id, session id, and secure session id, for example)
- Agent ID == User ID Unique and Persistent.
Step 7
Viewer -------> Simulator (on Grid) Handshake
- Viewer sends user id and session id
Step 8
Viewer -------> User server User server handshake
- Sent for presence information so Group IM works
- Confers group rights to user
- User server verifies the SIM session info via DB Presence-Agent table.(initially committed by the Login Server at the time of Sim-LoginSERVER negotiation) Step p3