User authentication from non-native server domains in a computer network

• US 6,021,496 A
• Filed: 07/07/1997
• Issued: 02/01/2000
• Est. Priority Date: 07/07/1997
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Smith, Stanley Alan, Dutcher, David Paul, Lenharth, Scott Alan, Rolette, James Michael Jr.
• Primary Examiner(s): HUA, LY
• Application Number:
  US08/897,495
• Time in Patent Office: 939 Days
• Field of Search: 395/187.01, 395/188.01, 395/186, 395/200.59, 395/200.33, 395/200.57, 380/25, 380/23, 707/9, 713/200, 713/201, 113/202, 280/23
• US Class Current: 726/21
• CPC Class Codes: G06F 21/31 User authentication

Abstract

A method of authenticating a user of a Windows NT client normally configured against an account held at a Windows NT server. The method begins in response to a logon request at the client. In particular, the user is provided with an option to select a server domain from a set of one or more native Windows NT server domains and/or non-native server domains for authentication. The list of native and/or non-native server domains is compiled by an administrator (e.g., during installation) or by the user (at logon). In response to user selection of the server domain, a connection is then established between the Windows NT client and the server domain. The user is then authenticated at the server domain. Following successful authentication of the Windows NT client at the server domain, a Windows NT user account is then established and maintained at the client.

Claims

1. A method of authenticating a user of client running a native operating system, the client normally configured against an account held at a server running the native operating system, comprising the steps of:

in response to a logon request at the client, providing the user with an option to select a non-native server domain for authentication;

in response to user selection of the non-native server domain, establishing a connection between the client and the non-native server domain; and

following successful authentication of the client at the non-native server domain, establishing a user account at the client in a format of the native operating system.

2. The method as described in claim 1 wherein the native operating system is Windows NT.

3. The method as described in claim 2 wherein the non-native server domain is a Server Message Block (SMB) server domain.

4. The method as described in claim 2 wherein the non-native server domain is a DCE Cell.

5. The method as described in claim 2 wherein in response to the logon request, the user is provided with an option to select the non-native server domain from a set of non-native server domains.

6. The method as described in claim 5 wherein the set of non-native server domains is discoverable from the client machine.

7. The method as described in claim 1 further including the steps of:

retrieving a user profile for the authenticated user from the non-native server domain; and

establishing the user profile at the client.

8. The method as described in claim 7 wherein the user profile includes a desktop configuration.

9. The method as described in claim 1 further including the step of associating a set of access rights to the user account.

10. The method as described in claim 9 wherein the step of associating a set of access rights to the user account includes the steps of:

retrieving a set of one or more groups from the non-native server domain;

creating a local representation at the client of each group; and

linking the user account to the local representation such that the user is a member of the group and thereby enjoys the privileges associated with the group.

11. The method as described in claim 1 further including the step of maintaining, deleting or disabling the user account following logoff.

12. A method of authenticating a user of a Windows NT client normally configured against an account held at a Windows NT server, comprising the steps of:

in response to a logon request at the client, providing the user with an option to select a server domain from a Windows NT server domain and a set of one or more non-native server domains for authentication;

in response to user selection of the non-native server domain, establishing a connection between the Windows NT client and the non-native server domain; and

following successful authentication of the Windows NT client at the non-native server domain, establishing a Windows NT user account at the client.

13. The method as described in claim 12 further including the steps of:

retrieving from the non-native server domain a user profile; and

establishing the user profile at the client.

14. The method as described in claim 12 further including the step of associating a set of access rights to the user account.

15. The method as described in claim 12 further including the step of taking a predetermined action with respect to the user account following logoff of the user from the Windows NT client, the predetermined action selected from the group of actions consisting of maintaining, disabling and deleting the user account.

16. The method as described in claim 12 wherein the non-native server domain is a Server Message Block (SMB) server domain.

17. The method as described in claim 12 wherein the non-native server domain is a DCE Cell.

18. A computer program product in a computer-readable medium for authenticating a user of a Windows NT client, comprising:

means for maintaining at the client a list of one or more non-native server domains at which a user may be authenticated;

means responsive to a logon request for providing the user with an option to select from the list a non-native server domain for authentication;

means responsive to user-selection of a non-native server domain for establishing a connection between the client and the non-native server domain; and

means responsive to successful authentication of the user for dynamically establishing a Windows NT user account at the client.

19. The computer program product as described in claim 18 further including means responsive to authentication for retrieving and establishing a user profile at the Windows NT client.

20. The computer program product as described in claim 18 further including means responsive to authentication for associating a set of access rights to the Windows NT user account.

21. The computer program product as described in claim 18 further including means responsive to the user logging off from the non-native server domain for taking a predetermined action with respect to the user action, the predetermined action selected from the group of actions consisting of deleting, disabling and maintaining the Windows NT user account.

22. The computer program product as described in claim 18 wherein the means for maintaining a list comprises:

means for discovering non-native server domains; and

means for compiling the discovered non-native server domains.

23. A computer connectable to a network, comprising:

a processor;

a Windows NT operating system;

an authentication mechanism, comprising;

means for maintaining at the client a list of one or more non-native server domains at which a user may be authenticated;

means responsive to a logon request for providing the user with an option to select from the list a non-native server domain for authentication;

means responsive to user-selection of a non-native server domain for establishing a connection between the client and the non-native server domain; and

means responsive to successful authentication of the user for dynamically establishing a Windows NT user account at the client.

24. The computer as described in claim 23 wherein the authentication mechanism further includes means responsive to authentication for retrieving and establishing a user profile at the Windows NT client.

25. The computer as described in claim 23 wherein the authentication mechanism further includes means responsive to authentication for associating a set of access rights to the Windows NT user account.

26. The computer as described in claim 23 wherein the authentication mechanism further includes means responsive to the user logging off from the non-native server domain for taking a predetermined action with respect to the Windows NT user account, the predetermined action selected from the group of actions consisting of deleting, disabling and maintaining the Windows NT user account.