Network server for local and remote resources

• US 5,642,515 A
• Filed: 04/17/1992
• Issued: 06/24/1997
• Est. Priority Date: 04/17/1992
• Status: Expired due to Term

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Jones, Donald Newland, Kalka, Robert Alois Jr.
• Primary Examiner(s): Hafiz, Tariq R.
• Application Number:
  US07/870,026
• Time in Patent Office: 1,894 Days
• Field of Search: 395/200, 395/325, 395/650, 395/725, 395/600, 395/800, 395/200.01-200.11, 395/300, 395/727, 395/728-732, 395/182.03, 395/182.18
• US Class Current: 710/220
• CPC Class Codes: G06F 21/335 for accessing specific resources, e.g. using Kerberos tickets
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 67/01 Protocols

Abstract

A network server permits clients on the network to access one or more local resources managed by the network server and one or more remote resources managed by one or more respective remote computers coupled to the network server. When a client desires to access any of the resources, the client first requests a session or log-on to the network server by supplying a valid account name and password. Either with the session establishment request or subsequently during the same session, the client requests a connection or access to a resource. The client need not know the location of the resource or the computer (remote or network server) which manages the resource. The network server determines which computer manages the requested resource. If the network server manages the resource, then the network server determines if the connection is available or provides the access as requested and responds to the client. Then, if the client subsequently requests a connection with or access to a resource managed by a remote computer, or if the original request was for a resource managed by the remote computer, the network server sends a session establishment request and connect or access request to the remote computer. The client need not send a separate session establishment request for the remote computer. If the remote computer grants the session, then the client can access the resource managed by the remote computer.

Claims

1. A method for managing access by clients in a network to a first, local resource managed by a network server and a second, remote resource managed by a remote computer logically and/or physically coupled to the network server, said method comprising the steps of:

sending from one of said clients to said network server a request to establish a session and a request to connect to or access the first resource, said session establishment request including an account name and password for said one client;

in response to the session establishment request, establishing by said network server a session between said network server and said one client, and storing said account name and password;

in response to the request to connect to or access said first resource, determining that said first resource is managed by said network server, and determining if said connection is available to said first resource;

subsequently, sending from said one client to said network server a request to connect to or access the second resource; and

in response to said subsequent request to connect to or access said second resource, determining by said network server that said remote computer manages said second resource, sending a request by said network server to said remote computer to establish a session with said remote computer, said request including said stored account name and password, and sending a request by said network server to said remote computer to connect to or access said second named resource; and

wherein

said network server and said one client reside in respective computers separate from each other and said remote computer.

2. A method as set forth in claim 1 further comprising the subsequent steps of:

sending from said one client to said network server a request to connect to or access a third resource;

determining by said network server that another remote computer, logically and/or physically coupled to said network server, manages said third resource; and

sending by said network server to said other remote computer a request to establish a session, said session establishment request including said stored account name and password, and a request to connect to or access said third resource.

3. A method as set forth in claim 1 further comprising the steps of:

validating by said remote computer said account name and password included in said session establishment request, and

establishing by said remote computer said session requested by said network server.

4. A method as set forth in claim 3 further comprising the steps of:

sending from said one client to said network server a request to terminate said session;

determining by said network server that said one remote computer is involved in said session;

sending by said network server to said one remote computer a request to terminate said session requested by said network server; and

terminating by said network server the session between said network server and said one client.

5. A method as set forth in claim 1 further comprising the steps of:

after said subsequent request, making a request by another application program executing within said remote computer to access said second resource; and

pursuant to said application program request by said other application program, providing access by said remote computer to said other application program to said second resource.

6. A method as set forth in claim 1 wherein the subsequent connect or access request sent by said one client to said network server specifies said second resource by name, but does not specify said remote computer or location of said second resource.

7. A method set forth in claim 1 wherein said request to establish said session and said request to connect to or access said first resource are provided by a single request.

8. A network server as set forth in claim 1 wherein said request to establish said session and said request to connect to or access said first resource are provided by a single request.

9. A method as set forth in claim 1 wherein said determining step and both said sending steps performed by said network server in response to said subsequent request are performed without another request including a password from said one client to establish a session.

10. A method as set forth in claim 1 wherein said request to connect to or access the second resource does not include and is not accompanied by an address or identifier of said remote computer.

11. A method as set forth in claim 1 wherein the network server computer is local to the one client computer.

12. A method for managing access by clients in a network to a local resource managed by a network server and a remote resource managed by a remote computer logically and/or physically coupled to the network server, said method comprising the steps of:

sending from one of said clients to said network server a request to establish a session and a request to connect to or access a first resource, said session establishment request including an account name and a password for said one client;

in response to the session establishment request, establishing by said network server a session with said network server, and storing said account name and password;

in response to the connect or access request, determining that said remote computer manages said first resource, sending a request by said network server to said remote computer to establish a session with said remote computer, said request including said stored account name and password, and sending a request by said network server to said remote computer to connect to or access said first resource;

subsequently, sending from said one client to said network server a request to connect to or access a second resource; and

in response to said subsequent request, determining that said network server manages said second resource, and determining whether said second resource is available; and

wherein

said network server and said one client reside in respective computers separate from each other and said remote computer.

13. A method as set forth in claim 12 further comprising the step of establishing said session with said remote computer by said remote computer validating said account name and password, in response to said session establishment request from said network server.

14. A method set forth in claim 12 wherein said request to establish said session and said request to connect to or access said first resource are provided by a single request.

15. A method as set forth in claim 12 wherein both of said determining steps performed in response to said subsequent request are performed without another request including a password from said one client to establish a session.

16. A method as set forth in claim 12 wherein said request to establish the first said session and said request to connect to or access the first resource do not include and are not accompanied by an address or identifier of said remote computer.

17. A method as set forth in claim 12 wherein the network server computer is local to the one client computer.

18. A network server for managing access by clients in a network to a first, local resource managed by the network server and a second, remote resource managed by a remote computer logically and/or physically coupled to the network server, said network server comprising:

means for receiving from one of said clients on said network a request to establish a session and a request to connect to or access the first resource, the session establishment request including an account name and password for said one client;

means, responsive to the session establishment request, for establishing a session between said network server and said one client, and storing said account name and password;

means, responsive to the request to connect to or access said first resource, for determining that said first resource is managed by said network server, and determining if said connection is available to said first resource; and

means, responsive to a subsequent request from said one client to connect to or access the second resource, for determining that said remote computer manages said second resource, sending a request to said remote computer to establish a session with said remote computer, said request including said stored account name and password, and sending a request to said remote computer to connect to or access said second resource; and

wherein

said network server and said one client reside in respective computers separate from each other and said remote computer.

19. A network server as set forth in claim 18 wherein:

the determining means is responsive to another request from said one client to connect to or access a third resource to determine that another remote computer, logically and/or physically coupled to said network server, manages said third resource; and

the sending means sends to said other remote computer a request to establish a session, said session establishment request including said stored account name and password, and a request to connect to or access said third resource.

20. A network server as set forth in claim 18 further comprising:

means, responsive to a request from said one client to terminate said session, for determining that said one remote computer is involved in said session;

means for sending to said one remote computer a request to terminate said session requested by said network server; and

means for terminating the session between said network server and said one client.

21. A network server as set forth in claim 18 wherein the subsequent connect or access request sent by said one client to said network server specifies said second resource by name, but does not specify said remote computer or a location of the resource managed said remote computer.

22. A network server as set forth in claim 18 wherein the means responsive to said subsequent request performs its determining function and both of its sending functions without another request including a password from said one client to establish a session.

23. A network server as set forth in claim 22 wherein said subsequent request to connect to or access the second resource does not include and is not accompanied by an address or identifier of said remote computer.

24. A network server as set forth in claim 18 wherein said subsequent request to connect to or access the second resource does not include and is not accompanied by an address or identifier of said remote computer.

25. A network server as set forth in claim 18 wherein the network server computer is local to the one client computer.

28. A network server as set forth in claim 23 wherein said request to establish the first said session and said request to connect to or access the first resource do not include and are not accompanied by an address or identifier of said remote computer.

26. A network server for managing access by clients in a network to a local resource managed by the network server and a remote resource managed by a remote computer coupled to the network server, said network server comprising:

means for receiving from one of said clients on said network a request to establish a session and a request to connect to or access a first resource, the session establishment request including an account name and a password for said one client;

means, responsive to the session establishment request, for establishing a session with said network server, and storing said account name and password;

means, responsive to the connect or access request, for determining that said remote computers manages said first resource, sending a request to said remote computer to establish a session with said remote computer, said request including said stored account name and password, and sending a request to said remote computer to connect to or access said first resource; and

means, responsive to a subsequent request to connect to or access a second resource, for determining that said network server manages said second resource, and determining whether said second resource is available; and

wherein

said network server and said one client reside in respective computers separate from each other and said remote computer.

27. A network server as set forth in claim 26 wherein the means responsive to said subsequent request performs both of its determining functions without another request including a password from said one client to establish a session.

29. A network server as set forth in claim 26 wherein said request to establish the first said session and said request to connect to or access the first resource do not include and are not accompanied by an address or identifier of said remote computer.

30. A network server as set forth in claim 26 wherein the network server computer is local to the one client computer.

31. A method for managing access by clients in a network to a remote resource managed by a remote computer logically and/or physically coupled to a server of said network, said method comprising the steps of:

sending from one of said clients to the network server a request to establish a session and a request to connect to or access the remote resource, said session establishment request including an account name and a password for said one client;

in response to the session establishment request, establishing by said network server a session with said network server, and storing said account name and password; and

in response to the connect or access request, determining that said remote computer manages said remote resource, sending a request by said network server to said remote computer to establish a session with said remote computer, said request including said stored account name and password, and sending a request by said network server to said remote computer to connect to or access said remote resource; and

wherein

said network server and said one client reside in respective computers separate from each other and said remote computer.

32. A method as set forth in claim 31 wherein the network server computer is local to the one client computer.

33. A network server for managing access by clients in a network to a remote resource managed by a remote computer logically and/or physically coupled to said network server, said network server comprising:

means for receiving from one of said clients on the network a request to establish a session with said network server and a request to connect to or access the remote resource, said session establishment request including an account name and a password for said one client;

means, responsive to the session establishment request, for establishing said session with said network server, and storing said account name and password; and

means, responsive to the request to connect to or access the remote resource, for determining that said remote computer manages said remote resource, sending a request by said network server to said remote computer to establish a session with said remote computer, said request including said stored account name and password, and sending a request to said remote computer to connect to or access said remote resource; and

wherein

said network server and said one client reside in respective computers separate from each other and said remote computer.

34. A network server as set forth in claim 33 wherein the network server computer is local to the one client computer.

35. A computer program product for instructing a network server computer to manage access by a client in a network to a remote resource managed by a remote computer logically and/or physically coupled to said network server computer, said computer program product comprising:

a computer readable medium;

first program instruction means for instructing the network server computer to receive from said client a request to establish a session with the network server computer and a request to connect to or access the remote resource, said session establishment request including an account name and a password for said client;

second program instruction means for instructing the network server computer to respond to the session establishment request, by establishing said session with said network server computer, and storing said account name and password; and

third program instruction means for instructing the network server computer to respond to the request to connect to or access the remote resource, by determining that said remote computer manages said remote resource, sending a request from said network server computer to said remote computer to establish a session with said remote computer, said request including said stored account name and password, and sending a request to said remote computer to connect to or access said remote resource; and

wherein

said client resides in a computer separate from said network server computer and said remote computer; and

said first, second and third program instruction means are recorded on said medium.

36. A computer program product as set forth in claim 35 wherein said first, second and third program instruction means are recorded on said medium in executable form.