Sun Microsystems, Inc.

Oracle America, Inc.

Brandon Eugene Taylor

William Hayden Connor

Arieh Markel

Peter H Schow

Anshuman Mishra

Alexander G Vul

Jeffrey A Hanson

Subramanya Kumar

Michael J Wookey

Martin Paul Mayhead

Paul Brian Monday

Jeffrey W Allen

Kumar Subramanya

A role passing and persistence mechanism that implements role-based access control at a container level is disclosed. In one implementation, the role passing and persistence mechanism provides one or more RBAC services. Functions provided by the role passing and persistence mechanism include role validating, role persisting and role administration. The role passing and persistence mechanism is used to persist role information for a session between a client and a container for any type of client. No matter which adaptor a client uses to connect to the container, the role passing and persistence mechanism provides a uniform method of passing role information to the container such that persisted role information can be used by any service hosted by the container after the session is established and the role information has been persisted.

Role passing and persistence mechanism for a container

A domain manager establishes an administrative domain for a network that has an associated set of assets and an associated set of users. The domain manager identifies at least one asset of the set of assets to be included in the administrative domain. An asset can be a hardware resource (e.g., computer, router, etc.) and/or a software resource (e.g., word processing application). In addition, the domain manager identifies at least one user of the set of users to be included in the administrative domain. The domain manager also establishes a set of roles within the administrative domain. For example, each role can define permissions (e.g., levels of accessibility) between a user and an asset (or group of assets) in the administrative domain.

Administrative grouping of network resources

A method for managing an asset that includes identifying a relative location of a scheme, wherein the scheme is used to manage the asset, creating a relative Uniform Resource Identifier (URI) using the relative location, wherein the relative URI that includes at least one variable, and creating an entry in a native access interface definition, wherein the entry that includes the relative URI, wherein the native asset interface definition is bound to a data acquisition (DAQ) definition, and wherein the DAQ definition is an interface between a protocol handler and an information model, wherein managing the asset is performed using an actual URI to obtain management information, wherein the actual URI is obtained by replacing the at least one variable of the relative URI, and wherein the management information is transmitted to a management application.

Use of URI-specifications in meta-data driven instrumentation

A method for providing management information about an asset includes obtaining a job from a job queue, determining the asset type of the asset from the job, triggering a protocol handler based on a data acquisition (DAQ) definition associated with the asset type and the job, receiving management information about the asset from the protocol handler, identifying at least one registered listener of the management information from the DAQ definition, where at least one registered listener includes an information model class instance, and notifying the at least one registered listener of the management information.

Asynchronous events in meta-data driven instrumentation

A method for gathering management information about an asset that includes receiving a first request for the management information about the asset, wherein the first request complies with the information model format, identifying a data acquisition (DAQ) definition for the DAQ definition complies with the DAQ format, triggering a protocol handler according to the DAQ definition, receiving the management information from the protocol handler about the asset, and updating a cache entry with the management information.

System and method for efficient meta-data driven instrumentation

Various embodiments of a system and method for provisioning a storage consumer with storage in a SAN networked computer system are disclosed. A SAN networked computer system may include one or more consumers of storage, such as host computers, a plurality of storage devices, and one or more SAN fabrics including the devices needed to connect the storage consumers to the storage devices. The system may also include a storage consumer-centric storage provisioner. To provide a storage consumer with storage, the storage consumer-centric storage provisioner may perform discovery on the system to acquire topologic information on the system along with the characteristics of system components. The storage provisioner may contextualize the information into the perspective of the storage consumer to present a user with candidate system configuration parameters from which to select, and when sufficient parameter selections have been input, the provisioner may configure the system according to the user selections.

Host-centric storage provisioner in a managed SAN

An approach for managing functionalities within a system generally involves the use of indicators, such as privileges, that are associated with the functionalities. Each functionality is associated with an indicator that is used to determine whether the associated functionality is available for use by an end user. A determination is made that one or more particular functionalities are to be associated with the response because the particular indicator is included in the set of indicators and corresponds to the one or more functionalities. If the system includes functionalities for which indicators are not included in the set of indicators, those functionalities are not reflected in the response. The response is sent so that information regarding the one or more particular functionalities can be displayed via a user interface. In some implementations, an access control mechanism can use privileges for determining functionality availability and privileges for determining user access.

Approach for managing functionalities within a system

An access control mechanism that implements access control at a container level is disclosed. In one implementation, the access control mechanism provides one or more access control services, and registers these services with a container. Once registered, the access control services are exposed to other applications in the container, and those applications can invoke the services to have the access control mechanism implement access control on their behalf. The access control mechanism implements access control for all applications within the container; thus, the applications do not need to implement their own access control mechanisms. In addition, the access control mechanism is not an operating system component. Thus, by relying on the access control mechanism for access control functionality, the applications are not relying on any operating system component. As a result, the applications, the container, and the access control mechanism can be ported to and run on other operating systems/platforms.

Container level access control mechanism

Provided are a method, system, and program for processing a call. A call is invoked from a caller object to a target object, wherein the caller and target objects comprise component objects loaded with caller and target class loaders, respectively, and wherein the caller object invokes the call using a local method invocation. The classes needed to process the call are loaded if the needed classes are not already loaded and if the target class loader is capable of loading the needed classes. Further classes that comprise the needed classes are dynamically loaded if the target class loader is not capable of loading the needed classes. The call is invoked after the needed classes are loaded and available for the target object to process the call.

Method, system, and program for dispatching a method call

Provided are a method, system, and program for processing objects in a distributed computing environment. A determination is made of a program is needed to process a component. A file including the determined program is requested from a remote process. The requested file is received from the remote process, wherein the requested file includes a plurality of sections, each including different programs. At least one section includes programs that are intended only to be executed in a remote address space of the remote process and at least one other section includes programs that are intended to be downloaded from the remote process and execute in a client address space that is different than the remote address space. The programs are loaded from the section including the determined program to execute in the client address space to process the component.

Method, system, and program for processing objects in a distributed computing environment

Provided are a computer implemented method, system, and program for discovering components within a network. A discovery operation is initiated to discover a network component. Upon discovering information on one network component, an entry is added to a data store providing information on the discovered component. In response to adding the entry to the data store, at least one of a plurality of programs is called to process the added entry, wherein each called program either accepts or declines to process the added entry. One program accepting to process the added entry initiates a further discovery operation in response to accepting the added entry. A new entry is added to the data store providing information on one network component discovered during the further discovery operation, wherein at least one program is called to process the new entry in response to adding the new entry.

Method, system, and program for discovering components within a network

Provided are a method, system, and program for making resources available for access to a client. A list is provided indicating a plurality of resources to make available for access to clients over a network and the list is processed to determine resources. Attributes of the resources are determined and reference codes are generated for the determined resources based on the determined attributes. The reference codes are associated with the resources for which the codes were generated. In response to receiving a request to one reference code from the client, a determination is made from the resource associated with the requested reference code and returning the determined resource to the requesting client.

Growing community of inventors

Longmont, CO, United States of America

Brandon Eugene Taylor