System and method for associating NIS attributes with CIFS clients

• US 8,082,261 B1
• Filed: 11/19/2009
• Issued: 12/20/2011
• Est. Priority Date: 06/01/2004
• Status: Active Grant

• Current Assignee: NetApp, Inc.
• Original Assignee: NetApp, Inc.
• Inventors: Hoffmann, John Eric, Drake, Daniel John
• Primary Examiner(s): Rones, Charles
• Assistant Examiner(s): Choi, Yuk Ting
• Application Number:
  US12/621,622
• Time in Patent Office: 761 Days
• Field of Search: 707/822
• US Class Current: 707/756
• CPC Class Codes: G06F 16/10 File systems; File servers
• CPC Class Codes: Y10S 707/99956 File allocation

Abstract

A system and method for associating NIS attributes with CIFS client. Upon requesting attributes by a CIFS client, a CIFS security ID (SID) is generated for the owner and group from the NIS attributes associated with the NIS name. The generated SIDs are returned to the CIFS client. The SIDs are generated using the NIS UID or GID and a CIFS domain associated with the file server storing the referenced file.

Claims

1. A computer implemented method comprising:

receiving, at a storage server comprising a processor and associated with a first protocol having a server domain name, a query for first attributes of a data structure using the first protocol, the data structure previously generated on the storage server and associated with second attributes of a second protocol, wherein the first protocol and the second protocol are different;

determining that the first attributes of the first protocol for the data structure do not exist, as the data structure was previously generated and associated with the second attributes of the second protocol;

in response to the first attributes of the first protocol for the data structure not existing, determining whether the first attributes of the first protocol for the data structure can be mapped from the second attributes of the second protocol for the data structure; and

in response to determining that the first attributes of the first protocol cannot be mapped from the second attributes of the second protocol, generating, by the storage server, a new name for the first attributes of the first protocol using the domain name of the server of the first protocol associated with the query as a domain portion of the new name, and a user identifier of the second attributes of the second protocol as a relative identifier of the new name.

2. The computer implemented method of claim 1, further comprising:

generating, by the storage server, a new group name for the first attributes of the first protocol using the domain name of the server of the first protocol associated with the query as a domain portion of the new group name, and a group identifier of the second attributes of the second protocol as a relative identifier of the new group name.

3. The computer implemented method of claim 2, further comprising:

generating an access control list for the first attributes based on permission bits of the second attributes, the new name, and the new group name.

4. The computer implemented method of claim 3, wherein the permission bits comprise an owner mode bit, a group mode bit, and an other mode bit.

5. The method of claim 1 wherein the first attributes comprises Common Internet File System (CIFS) attributes and wherein the second attributes comprise Network Information Services (NIS) attributes.

6. The method of claim 5 wherein the NIS attributes comprise network file system attributes.

7. The computer implemented method of claim 1 wherein the new name is a Common Internet File System (CIFS) security identifier (SID).

8. The computer implemented method of claim 1 wherein the user identifier associated with the second attributes comprises a Network Information Services (NIS) user identifier (UID).

9. A computer readable medium containing executable program instructions executed by a processor, comprising:

program instructions that receive, at a storage server of a first protocol having a server domain name, a query for first attributes of a data structure using the first protocol, the data structure previously generated on the storage server and associated with second attributes of a second protocol, wherein the first protocol and the second protocol are different;

program instructions that determine that the first attributes of the first protocol for the data structure do not exist, as the data structure was previously generated and associated with the second attributes of the second protocol;

program instructions that determine whether the first attributes of the first protocol for the data structure can be mapped from the second attributes of the second protocol for the data structure, in response to determining that the first attributes of the data structure do not exist; and

program instructions that generate a new name for the first attributes of the first protocol using the domain name of the server of the first protocol associated with the query as a domain portion of the new name, and a user identifier of the second attributes of the second protocol as a relative identifier of the new name in response to determining that the first attributes of the first protocol cannot be mapped from the second attributes of the second protocol.

10. The computer readable medium of claim 9, further comprising:

generating, by the storage server, a new group name for the first attributes of the first protocol using the domain name of the server of the first protocol associated with the query as a domain portion of the new group name, and a group identifier of the second attributes of the second protocol as a relative identifier of the new group name.

11. The computer readable medium of claim 9 wherein the first attributes comprises Common Internet File System (CIFS) attributes and wherein the second attributes comprise Network Information Services (NIS) attributes.

12. The computer readable medium of claim 11 wherein the NIS attributes comprise network file system attributes.

13. A system comprising:

a storage server comprising a processor and associated with a first protocol having a server domain name configured to receive at a network adapter of the storage server a query for first attributes of a data structure using the first protocol

the storage server further configured to determine that the first attributes of the first protocol for the data structure do not exist as the data structure was previously generated and associated with the second attributes of a second protocol, wherein the first protocol and the second protocol are different; and

the storage server further configured to determine whether the first attributes of the first protocol for the data structure can be mapped from the second attributes of the second protocol for the data structure in response to determining that the first attributes of the data structure do not exist; and

the storage server further configured to generate a new name for the first attributes of the first protocol using the domain name of the storage server of the first protocol associated with the received query as a domain portion of the new name, and a user identifier of the second attributes of the second protocol as a relative identifier of the new name, in response to determining that the first attributes of the first protocol cannot be mapped from the second attributes of the second protocol.

14. The system of claim 13, further comprising:

the storage server further configured to generate a new group name for the first attributes of the first protocol using the domain name of the server of the first protocol associated with the received query as a domain portion of the new group name, and a group identifier of the second attributes of the second protocol as a relative identifier of the new group name.

15. The system of claim 14, further comprising:

the storage server further configured to generate an access control list for the first attributes based on permission bits of the second attributes, the new name, and the new group name.

16. The system of claim 15 wherein the permission bits comprise an owner mode bit, a group mode bit, and an other mode bit.

17. The system of claim 13 wherein the first attributes comprises Common Internet File System (CIFS) attributes and wherein the second attributes comprise Network Information Services (NIS) attributes.

18. The system of claim 17 wherein the NIS attributes comprise network file system attributes.

19. The system of claim 13 wherein the new name is a Common Internet File System (CIFS) security identifier (SID).

20. The system of claim 13 wherein the user identifier associated with the second attributes comprises a Network Information Services (NIS) user identifier (UID).