Dynamic creation of a user account in a client following authentication from a non-native server domain

• US 6,092,199 A
• Filed: 07/07/1997
• Issued: 07/18/2000
• Est. Priority Date: 07/07/1997
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Smith, Stanley Alan, Dutcher, David Paul, Lenharth, Scott Alan, Rolette, James Michael Jr.
• Primary Examiner(s): Beausoliel, Jr., Robert W.
• Assistant Examiner(s): Elisca, Pierre E.
• Application Number:
  US08/888,726
• Time in Patent Office: 1,107 Days
• Field of Search: 395/186, 395/188.01, 395/187.01, 395/200.59, 380/4, 380/25, 380/30, 707/9, 707/10, 707/101, 713/201, 713/200, 713/202, 709/203, 709/217, 709/219, 709/225, 709/227, 709/229
• US Class Current: 726/4
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/102 Entity profiles

Abstract

A user is authenticated at a client machine running a native operating system. Authentication may be effected from one or more non-native server domains including, without limitation, a Server Message Block (SMB) server domain, a DCE Cell, or some other non-Windows NT server domain. Following successful authentication, a user account is dynamically established or updated at the client by retrieving from the server user information and a set of "group" privileges associated with the authenticated user. A local representation of these privileges is then dynamically created on the client, after which the privileges are linked to the user account to make the user a member of the local representation. In this manner, the group information is saved on the local machine and the authenticated user is afforded appropriate access rights to the client and the server.

Claims

1. A method of setting up a user at a client running a native operating system, the client normally configured against an account held at a server running the native operating system, comprising the steps of:

following authentication of the user against a non-native server domain, dynamically establishing a user account at the client in the format of the native operating system; and

associating user privileges to the user account.

2. The method as described in claim 1 wherein the native operating system is a closed operating system.

3. The method as described in claim 2 wherein the non-native server domain is a Server Message Block (SMB) server domain.

4. The method as described in claim 2 wherein the non-native server domain is a DCE Cell.

5. The method as described in claim 1 wherein the step of associating user privileges to the user account includes the steps of:

retrieving a set of one or more groups from the non-native server domain;

creating a local representation of each group; and

linking the user account to the local representation such that the user is a member of the group and thereby enjoys the privileges associated therewith.

6. A method of setting up a user at a client running a native operating system, the client normally configured against an account held at a server running the native operating system, comprising the steps of:

following authentication of the user against a non-native server domain, dynamically updating a pre-existing user account at the client; and

associating user privileges to the user account.

7. The method as described in claim 6 wherein the native operating system is a closed operating system.

8. The method as described in claim 7 wherein the non-native server domain is a Server Message Block (SMB) server domain.

9. The method as described in claim 7 wherein the non-native server domain is a DCE Cell.

10. The method as described in claim 6 wherein the step of associating user privileges to the user account includes the steps of:

retrieving a set of one or more groups from the non-native server domain;

creating a local representation of each group; and

linking the user account to the local representation such that the user is a member of the group and thereby enjoys the privileges associated therewith.

11. A computer program product in a computer-readable medium for setting up a user at a client running a native operating system, the client normally configured against an account held at a server running the native operating system, comprising:

means responsive to authentication of the user against a non-native server domain for dynamically establishing or updating a user account at the client in the format of the native operating system; and

means for associating user privileges to the user account.

12. The computer program product as described in claim 11 wherein the native operating system is a closed operating system.

13. The computer program product as described in claim 12 wherein the non-native server domain is a Server Message Block (SMB) server domain.

14. The computer program product as described in claim 12 wherein the non-native server domain is a DCE Cell.

15. The computer program product as described in claim 12 wherein the means for associating user privileges to the user account includes:

means for retrieving a set of one or more groups from the non-native server domain;

means for creating a local representation of each group; and

means for linking the user account to the local representation such that the user is a member of the group and thereby enjoys the privileges associated therewith.

16. A computer connectable to a network, comprising:

a processor;

a closed operating system;

means responsive to authentication of the user against a non-native server domain for dynamically establishing or updating a closed operating system user account at the computer; and

means for associating user privileges to the user account.

17. The computer as described in claim 16 wherein the non-native server domain is a Server Message Block (SMB) server domain.

18. The computer as described in claim 16 wherein the non-native server domain is a DCE Cell.

19. The computer as described in claim 16 wherein the means for associating user privileges to the user account includes:

means for retrieving a set of one or more groups from the non-native server domain;

means for creating a local representation of each group; and

means for linking the user account to the local representation such that the user is a member of the group and thereby enjoys the privileges associated therewith.

20. A method of setting up a user at a closed operating system client normally configured against an account held at a closed operating system server, comprising the steps of:

following authentication of the user against a non-native server domain, taking a predetermined action with respect a closed operating system user, the predetermined action selected from the group of actions consisting of establishing a new closed operating system user account and updating an existing closed operating system user account; and

associating user privileges stored in the non-native server domain to the closed operating system user.