REDUCING JOB CREDENTIALS MANAGEMENT LOAD

• US 20150268987A1
• Filed: 06/03/2015
• Published: 09/24/2015
• Est. Priority Date: 11/25/2013
• Status: Abandoned Application

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Ding, Zhaohui, Liu, Fang, Sanjabi, Sam, Shen, Rongsong, Wang, Shuai Jie, CHEN, CHONG
• Application Number:
  US14/729,289
• Publication Number:
  US 20150268987A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 9/468 Specific access rights for resources, e.g. using capability register

Abstract

A method for reducing job credentials management load is provided in the illustrative embodiments. A determination is made whether a credential data submitted with a job matches a second credential data stored in a repository, the credential data comprising a set of attributes. Responsive to the credential data matching the second credential data, a reference to the second credential data is associated with the job. The second credential data is updated to enable the job for execution. The job is forwarded with the reference to a receiver application, wherein the reference provides the receiver application an authorization to execute the job.

Claims

1. A method for reducing job credentials management load, the method comprising:

determining, at a first application using a processor and a memory, whether a credential data submitted with a job matches a second credential data stored in a repository, the credential data comprising a set of attributes;

associating, responsive to the credential data matching the second credential data, a reference to the second credential data with the job;

updating the second credential data to enable the job for execution; and

forwarding the job with the reference to a receiver application, wherein the reference provides the receiver application an authorization to execute the job.

2. The method of claim 1, further comprising:

selecting the receiver application, wherein the application operates to schedule jobs in a first cluster of data processing systems, and wherein the receiver application operates to schedule jobs in a second cluster of data processing systems.

3. The method of claim 1, wherein the credential data comprises an authorization attribute in a data file, and wherein the data file is forwardable from a first data processing system to a second data processing system such that the data file can be updated from both the first and the second data processing systems, and wherein the authorization attribute in the data file is determinative of whether the job can access a resource on a third data processing system during execution.

4. The method of claim 1, further comprising:

sending, to a credentials management system, a request to update the second credential data, wherein the application operates to schedule jobs in a first cluster of data processing systems, and wherein the credentials management system is operated by an entity unrelated to the operation of the first cluster.

5. The method of claim 1, further comprising:

computing a hash value of a subset of the set of attributes, wherein the determining comprises comparing the hash value with a second hash value computed from a corresponding subset of attributes of a set of attributes of the second credential data.

6. The method of claim 5, wherein the repository stores the second hash value.

7. The method of claim 1, further comprising:

receiving a previous job with the second credential data; and

saving the second credential data in the repository.

8. The method of claim 1, further comprising:

associating a use count indicator with the second credential data, wherein the use count indicator indicates a total number of jobs associated with the second credential data; and

incrementing, responsive to the credential data matching the second credential data, the use count.

9. The method of claim 8, further comprising:

decrementing the use count after an execution of one of (i) the previous job and (ii) the job, has completed.

10. The method of claim 1, wherein the reference is a hash value computed from a subset of attributes of a set of attributes of the second credential data.