Sessionless redirection in terminal services

• US 8,291,481 B2
• Filed: 06/27/2008
• Issued: 10/16/2012
• Est. Priority Date: 09/18/2007
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Das, Munindra N., Sampath, Sriram, Wong, Huei Chung, Beletski, Rouslan, Dopson, Dave
• Primary Examiner(s): KOSOWSKI, CAROLYN M
• Application Number:
  US12/163,945
• Publication Number:
  US 20090328172A1
• Time in Patent Office: 1,572 Days
• Field of Search: 726/7, 726/15
• US Class Current: 726/7
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 67/1001 for accessing one among a plurality of replicated servers
• CPC Class Codes: H04L 67/1027 Persistence of sessions during load balancing

Abstract

Embodiments described herein are directed to establishing a terminal services (TS) session between a TS server and the client without creating a temporary session. In one embodiment, a computer system receives a user request indicating that a TS session with a first TS server is to be initiated. The request includes an indication that the user is authenticated and authorized to use the first TS server. The computer system searches for any prior TS sessions previously initiated by the user with other TS servers and determines, based on the search, that at least one prior TS session was initiated with a second TS server. The computer system also sends redirection data to the user indicating that the user request is to be redirected to the second TS server to reestablish the prior TS session with the second TS server.

Claims

1. In a computer networking environment comprising a plurality of computing systems including a client computer system and a terminal server computer system, a computer-implemented method for establishing a terminal services (TS) session between a TS server and a user at the client computing system without creating a temporary session, the computer-implemented method being performed by acts that are executed in the networking environment and which comprise the following:

receiving at a first TS server user authentication credentials generated by a credential service prior to or with a user request for a TS session;

authenticating the user to the first TS server using the received authentication credentials;

receiving at the first TS server the user request indicating that a TS session with a TS server is to be initiated;

searching at the first TS server for any prior TS sessions previously initiated by the user with any of the one or more TS servers;

determining, based on the search, whether at least one prior TS session was initiated with a second TS server;

if a prior TS session was determined to have been initiated with a second TS server, sending redirection data to the client computer system of the user indicating that the user request is to be redirected to the second TS server to reestablish the prior TS session with the second TS server; and

establishing a TS session between the client computer system and the second TS server using the received authentication credentials, such that the TS session between the client computer system of the user and the second TS server is established without creating a temporary session between the client computer system of the user and the first TS server.

2. The method of claim 1, wherein the request includes an indication that the user is authenticated and further includes identification information identifying the user'"'"'s identity.

3. The method of claim 1, wherein the user authentication credentials are generated as part of a login request.

4. The method of claim 1, further comprising:

determining that, based on the search, no prior TS sessions were established with other TS servers by the user; and

establishing a TS session between the client computer system of the user and the first TS server using the user authentication credentials.

5. The method of claim 1, further comprising:

determining that, based on the search, a prior TS session was established with the first TS server by the user; and

reestablishing the prior TS session between the client computer system of the user and the first TS server using the user authentication credentials.

6. The method of claim 1, wherein the prior TS session previously initiated by the user is a disconnected session.

7. In a computer networking environment including a client computer system and a terminal services (TS) server farm, a computer-implemented method for establishing a TS session between at least one TS server of the server farm and the client computer system without creating a temporary session, the computer-implemented method being performed by acts that are executed in the networking environment and which comprise the following:

receiving at a TS server farm session broker user authentication credentials generated in response to a TS server login request, the authentication credentials having been generated by a credential service on the user'"'"'s client computer system;

receiving at the TS server farm session broker a user request indicating that a TS session with a TS server in the server farm is to be initiated, the request including identification information identifying the user as the user whose authentication credentials were previously received;

searching at the TS server farm session broker for any prior TS sessions previously initiated by the user with other TS servers in the server farm using the received authentication credentials;

determining at the TS server farm session broker, based on the search, that at least one prior TS session was initiated with an identified TS server in the server farm;

sending redirection data from the TS server farm broker to the user'"'"'s client computer system indicating that the user request is to be redirected to the identified TS server to reestablish the prior TS session with the identified TS server in the server farm; and

establishing a TS session with the identified TS server using the identification information included in the user request, such that the TS session between the user'"'"'s client computer system and the indicated TS server is established without creating a temporary session between the user'"'"'s client computer system and the TS server farm session broker.

8. The method of claim 7, wherein the TS server farm session broker redirects user requests based on current server load status, such that the load is balanced among the TS servers in the farm.

9. The method of claim 7, wherein the TS server farm session broker is configured to store session information including session IDs, user names, server names and session state information.

10. The method of claim 7, further comprising:

the TS server farm session broker determining, based on the search, that a plurality of prior TS session were initiated with a plurality of TS servers in the server farm;

the TS server farm session broker determining, based on current server load status, which of the determined plurality of TS servers is to be selected to handle the request; and

the TS server farm session broker redirecting the user request to the TS server selected to handle the request.

11. The method of claim 10, further comprising discarding at least one of the prior TS sessions after the TS session between the selected TS server and the client computer system is established.

12. A computer program product for a computer-implemented method for establishing a terminal services (TS) session between a TS server and the client without creating a temporary session, the computer program product comprising one or more physical storage media having thereon computer-executable instructions that, when executed by one or more processors of the computing system, cause the computing system to perform the method, and the method comprising:

receiving at a first TS server user authentication credentials generated by a credential service prior to or with a user request for a TS session;

authenticating the user to the first TS server using the received authentication credentials;

receiving at the first TS server the user request indicating that a TS session with a TS server is to be initiated;

searching at the first TS server for any prior TS sessions previously initiated by the user with any of the one or more TS servers;

determining, based on the search, whether at least one prior TS session was initiated with a second TS server;

if a prior TS session was determined to have been initiated with a second TS server, sending redirection data to the client computer system of the user indicating that the user request is to be redirected to the second TS server to reestablish the prior TS session with the second TS server; and

establishing a TS session between the client computer system and the second TS server using the received authentication credentials, such that the TS session between the client computer system of the user and the second TS server is established without creating a temporary session between the client computer system of the user and the first TS server.

13. A computer networking system comprising:

a client computing system at which a client login request is entered, the client computing system generating a user request to establish a TS session with at least one TS server;

a first TS server configured to receive the user request and to provide session broker service, the first TS server comprising a search module and a redirection module;

an authentication credential service configured to receive user authentication credentials, authenticate the credentials and delegate the user'"'"'s authenticated credentials from the client computing system to the first TS server prior to or with the user request;

one or more additional TS servers each containing session state information indicating whether the particular user at the client computing system previously initiated any session with that TS server, so that when the search module of the first TS server searches the session state information for the one or more additional TS servers, those servers that have had prior sessions with the user are identified by the first TS server, and wherein,

if the first TS server determines, based on the search, that at least one prior TS session was initiated with a second TS server the first TS server then sends from its redirection module redirection data to the user'"'"'s client computing system indicating that the user request is to be redirected to the second TS server to reestablish the prior TS session with the second TS server so that the second TS server establishes a TS session with the user'"'"'s client computer system using the received authentication credentials, with the TS session between the user'"'"'s client computing system and the second TS server being established without creating a temporary session between the user'"'"'s client computing system and the first TS server.