Specifying a repository for an authentication token in a distributed computing system

• US 7,386,877 B2
• Filed: 07/12/2002
• Issued: 06/10/2008
• Est. Priority Date: 07/12/2002
• Status: Active Grant

• Current Assignee: Oracle America, Inc. (Oracle Corporation)
• Original Assignee: Sun Microsystems Incorporated (Oracle Corporation)
• Inventors: Vesseur, Joep J., Moffat, Darren J., Winiger, Gary W.
• Primary Examiner(s): Sheikh; Ayaz
• Assistant Examiner(s): Abrishamkar; Kaveh
• Application Number:
  US10/194,910
• Publication Number:
  US 20040010715A1
• Time in Patent Office: 2,160 Days
• Field of Search: 726/3, 726/4, 726/5, 726/27
• US Class Current: 726/3
• CPC Class Codes: G06F 21/31 User authentication

Abstract

One embodiment of the present invention provides a system that facilitates specifying a repository containing authentication information to a plugin in a plugable authentication system. When the system receives a command that requires the repository to be accessed, the system populates a data structure with information including a specifier for the repository. The system passes this data structure into a plugin framework. This enables one or more plugins within the framework to access the specified repository.

Claims

1. A method to facilitate specifying a repository containing authentication information within a pluggable authentication system, wherein the repository is part of a distributed computer system, comprising:

receiving a command that includes a specifier for the repository and requires the repository to be accessed, wherein the specifier indicates where the repository is located within the distributed computer system;

populating a data structure with optional data from the command, wherein the data structure includes the specifier for the repository;

if there is no optional data within the command, populating the data structure with null values, whereby plugins can recognize the default values and can perform a default action when no optional data is supplied within the command; and

passing the data structure to a plugin framework, thereby enabling one or more plugins within the framework to;

locate the specified repository, and to

access the specified repository;

wherein accessing at least one plugin involves accessing a series of plugins in an order specified by a security administrator.

2. The method of claim 1, wherein the command includes a change authentication token command to change an authentication token within the repository.

3. The method of claim 2, wherein the authentication token includes a password.

4. The method of claim 1, further comprising authenticating a user that originated the command prior to passing the data structure to the plugin framework.

5. The method of claim 1, wherein the specifier contains type information, which specifies a type for the repository.

6. The method of claim 1, further comprising:

examining a type field within the data structure at the type of the repository; and

if the type field contains a null value,

processing the command in a default manner specified within the plugin,

else if the type field contains a type value known to the plugin,

processing the command using an optional scope included in the data structure,

otherwise,

ignoring the command.

7. A computer-readable storage medium storing instructions that when executed by a computer cause the computer to perform a method to facilitate specifying a repository containing authentication information within a pluggable authentication system, wherein the repository is part of a distributed computer system, the method comprising:

receiving a command that includes a specifier for the repository and requires the repository to be accessed, wherein the specifier indicates where the repository is located within the distributed computer system;

populating a data structure with optional data from the command, wherein the data structure includes the specifier for the repository;

if there is no optional data within the command, populating the data structure with null values, whereby plugins can recognize the default values and can perform a default action when no optional data is supplied within the command; and

passing the data structure to a plugin framework, thereby enabling one or more plugins within the framework to;

locate the specified repository, and to

access the specified repository;

wherein accessing at least one plugin involves accessing a series of plugins in an order specified by a security administrator.

8. The computer-readable storage medium of claim 7, wherein the command includes a change authentication token command to change an authentication token within the repository.

9. The computer-readable storage medium of claim 8, wherein the authentication token includes a password.

10. The computer-readable storage medium of claim 7, the method further comprising authenticating a user that originated the command prior to passing the data structure to the plugin framework.

11. The computer-readable storage medium of claim 7, wherein the specifier contains type information, which specifies a type for the repository.

12. The computer-readable storage medium of claim 7, the method further comprising:

examining a type field within the data structure at the type of the repository; and

if the type field contains a null value,

processing the command in a default manner specified within the plugin,

else if the type field contains a type value known to the plugin,

processing the command using an optional scope included in the data structure,

otherwise,

ignoring the command.

13. An apparatus to facilitate specifying a repository containing authentication information within a pluggable authentication system, wherein the repository is part of a distributed computer system, comprising:

a receiving mechanism that is configured to receive a command that includes a specifier for the repository and requires the repository to be accessed, wherein the specifier indicates where the repository is located within the distributed computer system;

a populating mechanism that is configured to populate a data structure with optional data from the command, wherein the data structure includes the specifier for the repository;

a setting mechanism that is configured to populate the data structure with null values if there is no optional data within the command, whereby plugins can recognize the default values and can perform a default action when no optional data is supplied within the command; and

a data structure passing mechanism that is configured to pass the data structure to a plugin framework, thereby enabling one or more plugins within the framework to;

locate the specified repository, and to

access the specified repository;

wherein accessing at least one plugin involves accessing a series of plugins in an order specified by a security administrator.

14. The apparatus of claim 13, wherein the command includes a change authentication token command to change an authentication token within the repository.

15. The apparatus of claim 14, wherein the authentication token includes a password.

16. The apparatus of claim 13, further comprising an authenticating mechanism that is configured to authenticate a user that originated the command prior to passing the data structure to the plugin framework.

17. The apparatus of claim 13, wherein the specifier contains type information, which specifies a type for the repository.

18. The apparatus of claim 13, further comprising:

an examining mechanism that is configured to examine a type field within the data structure at the type of the repository; and

a processing mechanism that is configured to process the command in a default manner specified within the plugin, if the type field contains a null value;

wherein the processing mechanism is further configured to process the command using an optional scope included in the data structure if the type field contains a known type value; and

wherein the processing mechanism is further configured to ignore the command if the type field contains an unknown type value.