Configuring password file authentication for the Server Master Client

Finally, you must create a property which points to the file in which you put your SMC password. You must add the following property to your SMC's my.run.properties file (if you are using the binary release) or your my.build.properties file (if you are using the source tree).

Configuring LDAP authentication for the Server Master Client

You can also use LDAP to configure a password for the Server Master Client. To do this, the LDAP system must contain a password for user ServerMasterClient. You must create a plain text file on the system on which you run the SMC and place the SMC password in this file as the first line followed by ENTER. For example, you could put this password in the file lg3d-wonderland/data/Wonderland/smc_password. The first line would contain the text MySMCPassword (for example).

Finally, you must create a property which points to the file in which you put your SMC password. You must add the following property to your SMC's my.run.properties file (if you are using the binary release) or your my.build.properties file (if you are using the source tree).

smc.password.file=data/Wonderland/smc_password

Configuring authentication for the Server Master Client

Configuring Authentication for Project Wonderland

UNDER MODIFICATION -- CHECK BACK IN A BIT

Configuring file-based authentication

Enabling file-based authentication

• src/darkstar_config/WonderlandMain.cfg if using the source distribution
• config/WonderlandMain.cfg if using the binary distribution

Uncomment the following lines in WonderlandMain.cfg:

Adding and removing users in the password file

Passwords in the password file are stored using an MD5 hash. A tool is provided to add a new user to the file.

If you are using the binary release, use the following command to add to the password file:

# cd <install directory>
#  java -cp ext/darkstar/lib/sgs.jar com.sun.sgs.impl.auth.PasswordFileEditor data/Wonderland/passwords <username> <password>

If you are using the source release, use the following command to add to the password file:

4. Configuring authentication for the Server Master Client

Configuring LDAP-based authentication

LDAP authentication can be used to authenticate users against an LDAP database, typically used for corporate authentication. There are many freely available and open source LDAP servers, such as the OpenDS project.

To enable LDAP-based authentication, edit the WonderlandMain.cfg file. This file is located in two different places depending upon whether you are working with the binary distribution or source distribution of Project Wonderland:

• src/darkstar_config/WonderlandMain.cfg if using the source distribution
• config/WonderlandMain.cfg if using the binary distribution

4. Configuring authentication for the Server Master Client

If you plan to run the Server Master Client (SMC), you should also use the above technique to add to the password file the user name and password of the SMC. The user name of the SMC is ServerMasterClient.

If you are using the binary release, use the following command to add to the password file:

   #  java -cp ext/darkstar/lib/sgs.jar com.sun.sgs.impl.auth.PasswordFileEditor data/Wonderland/passwords ServerMasterClient pass

If you are using the source release, use the following command to add to the password file:

   #  java -cp ext/sgs/darkstar/lib/sgs.jar com.sun.sgs.impl.auth.PasswordFileEditor data/Wonderland/passwords ServerMasterClient pass

By default, the password of the SMC is guest. You can however specify a non-default password. In this case you will need to create a file which contains the password of the SMC. For example, you can put this password in the file lg3d-wonderland/data/Wonderland/smc_password. Then you must add the following line to your my.run.properties file (if you are using the binary release) or your my.build.properties file (if you are using the source tree).

 smc.password.file=data/Wonderland/smc_password

TODO: the password of the server master client is currently not configurable. This is a security problem and needs to be fixed.

<-- This creates the navigation links to :  Home | Help | Index | etc.  -->

Project Wonderland Authentication

By default, Project Wonderland does not require users to authenticate to the server. An administrator can turn on one of the two currently supports two methods of authentication: file-based authentication and LDAP-based authentication. This document explains how to configure these types of authentication.

Configuring file-based authentication

The simplest for of authentication is file-based. User's ids an passwords are stored in a file, which can be updated by the administrator.

1. Enable file-based authentication

To enable file-based authentication, edit the file src/darkstar_config/WonderlandMain.cfg in the lg3d-wonderland directory. Uncomment the following lines:

   // simple authenticator
   com.sun.sgs.app.authenticators=com.sun.sgs.impl.auth.NamePasswordAuthenticator
   com.sun.sgs.impl.auth.NamePasswordAuthenticator.PasswordFile=data/Wonderland/passwords

2. Add a user

Passwords in the password file are stored using an MD5 hash. A tool is provided to add a new user to the file. From the lg3d-wonderland directory, run:

   #  java -cp ext/sgs/darkstar/lib/sgs.jar com.sun.sgs.impl.auth.PasswordFileEditor data/Wonderland/passwords user pass

3. Remove a user

A user can be removed by editing the password file directly and removing the line with the user's username.

Configuring LDAP authentication

LDAP authentication can be used to authenticate against an LDAP database, typically used for corporate authentication. There are many freely available and open source LDAP server, such as the OpenDS project.

To configure the LDAP server, edit the file src/darkstar_config/WonderlandMain.cfg in the lg3d-wonderland directory. Uncomment the following lines:

// LDAP authenticator
com.sun.sgs.app.authenticators=org.jdesktop.lg3d.wonderland.darkstar.server.auth.LDAPAuth
org.jdesktop.lg3d.wonderland.darkstar.server.auth.ldap.directory=ldaps://localhost
org.jdesktop.lg3d.wonderland.darkstar.server.auth.ldap.base-dn=ou=people,dc=lg3d,dc=org

Replace the value of the directory property with your LDAP server's hostname, for example ldaps://sun-directory.sun.com. You must also replace the base-dn, which is the root of the directory tree to search, with the correct base for your LDAP server.

In addition to the properties above, you may set the following optional properties, as specified in the Javadoc for org.jdesktop.lg3d.wonderland.darkstar.server.auth.LDAPAuth.