Unification of directory service with file system service

• US 6,081,898 A
• Filed: 08/05/1997
• Issued: 06/27/2000
• Est. Priority Date: 12/29/1993
• Status: Expired due to Term

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Neeman, Yuval, Miller, Arnold, Rubin, Darryl E., Contorer, Aaron M., Misra, Pradyumna K., Seaman, Michael R. C.
• Primary Examiner(s): LE, DIEU MINH T
• Application Number:
  US08/906,346
• Time in Patent Office: 1,057 Days
• Field of Search: 395/187.01, 395/186, 395/188.01, 395/200.31, 395/200.32, 395/200.47, 395/200.49, 395/200.59, 707/6, 707/9, 707/10, 707/102, 707/104, 380/4, 380/25, 380/23, 713/200, 713/201, 713/202, 709/201, 709/229
• US Class Current: 726/1
• CPC Class Codes: G06F 16/10 File systems; File servers
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/6236 between heterogeneous systems
• CPC Class Codes: Y10S 707/966 Distributed
• CPC Class Codes: Y10S 707/99939 Privileged access
• CPC Class Codes: Y10S 707/99945 Object-oriented database structure processing
• CPC Class Codes: Y10S 707/99948 Application of database or data structure, e.g. distributed, multimedia, or image

Abstract

A software system unifies directory services with the file system. Directory service entries and other files are all stored in a common logical format, such as an object format. The unification of files with directory service entries allows a common set of tools to operate on both such entities and allows a common name space to be utilized. Security measures are taken so as to prevent unauthorized access to the directory service entries.

Claims

1. In a distributed system having a distributed file system and at least one storage device for storing objects, a method comprising the steps of:

storing file objects on the storage device, the file objects being manipulatable through an application programming interface;

storing directory service objects on the storage device for access by clients, sad directory service objects providing directory services for the distributed system and being manipulatable through the application programming interface;

receiving from a client a request to manipulate a directory service object stored on the storage device; and

in response to receiving the request,

activating an agent to manipulate the directory service object on behalf of the client; and

under control of the activated agent, invoking the application programming interface to manipulate the directory service object

whereby the client indirectly manipulates the directory service object through the activated agent

and wherein the same application programming interface is utilizable to manipulate both the file objects and the directory service objects.

2. The method of claim 1 including protecting directory service objects from unauthorized access by, in response to the request to manipulate a directory service object, requiring the client to exhibit knowledge of a secret before being granted access to manipulate the directory service object.

3. The method of claim 1 including:

receiving from the client a request to manipulate a file object that is stored on the storage device; and

in response to receiving the request to manipulate a file object that is stored on the storage device, under control of the client, invoking the application programming interface to directly manipulate the file object.

4. A computer-readable medium whose contents cause one or more computer systems to manage objects in a distributed system, the distributed system having a distributed file system and at least one storage device for storing objects, by performing the steps of:

storing file objects on the storage device, the file objects being manipulatable through an application programming interface;

storing directory service objects on the storage device for access by clients, said directory service objects providing directory services for the distributed system and being manipulatable through the application programming interface;

receiving from a client a request to manipulate a directory service object stored on the storage device; and

in response to receiving the request,

activating an agent to manipulate the directory service object on behalf of the client; and

under control of the activated agent, invoking the application programming interface to manipulate the directory service object

whereby the client indirectly manipulates the directory service object through the activated agent

and wherein the same application programming interface is utilizable to manipulate both the file objects and the directory service objects.

5. The computer-readable medium of claim 4 including protecting directory service objects from unauthorized access by, in response to the request to manipulate a directory service object, requiring the client to exhibit knowledge of a secret before granting the client permission to manipulate the directory service object.

6. The computer-readable medium of claim 4 including:

receiving from the client a request to manipulate a file object that is stored on the storage device; and

in response to receiving the request to manipulate a file object that is stored on the storage device, under control of the client, invoking the application programming interface to directly manipulate the file object.