Red Hat, Inc.

Ansible, Inc.

Michael P DeHaan

Matthew W Jones

Christopher S Church

Christopher L Houseknecht

Adrian Karstan Likins

Seth Kelby Vidal

William F Peck

Steven Salevan

Mechanisms for controlling access to credentials are disclosed. A computing device receives, at a first time, a request associated with a user to initiate a plurality of actions against a computing resource of a plurality of computing resources, the request including a credential identifier that identifies a credential. A memory is accessed, based on the credential identifier, to retrieve the credential identified by the credential identifier that was stored in the memory at a time prior to the first time, the credential comprising authentication information configured to authenticate the plurality of actions to the computing resource. The computing device communicates the request and the authentication information to an orchestration engine for execution of the plurality of actions against the computing resource.

Methods and apparatus for using credentials to access computing resources

Mechanisms for controlling access to a computing resource are disclosed. A request to initiate an action against a computing resource of a plurality of computing resources is received from a user. A plurality of permission definitions that identify a plurality of corresponding permissions that grant access to the plurality of computing resources is accessed. Based on a set of permissions comprising at least one permission associated with the user and at least one permission associated with a team of which the user is a member, it is determined that at least one permission in the set of permissions grants the user access to the computing resource. The request to initiate the action against the computing resource is processed.

Role-based permissions for accessing computing resources

Embodiments relate to systems and methods for the remote configuration of networked systems using a secure modular platform. A network management engine communicates with a set of remote machines, such as a collection of clients or servers on a network. The network management engine can present a systems administrator with a set of compact network commands to permit the administrator to interrogate, configure, and manage the set of controlled machines on a dynamic basis. The network management engine can, for instance, install or update software, detect viruses on the controlled machines, perform an inventory of installed hardware on the controlled machines, and perform other network management functions using pre-configured functions and APIs built into a network library or command directory. Besides incorporating pre-configured management modules, the network management engine further allows a systems administrator to add custom modules in the command directory, using efficient modular interfaces compatible with network-level management processing.

Remote management of networked systems using secure modular platform

Embodiments relate to systems and methods for integrated console management in networks populated by a diverse set of console types. A set of managed machines, such as personal computers or other clients, servers, hosts, and/or other machines, can be managed by a network management platform. Different machines populating the managed network can be accessed or controlled by different types of network management consoles, or client interfaces for monitoring and controlling different sets of machines. The network management platform or other node can maintain a console management engine which interacts with the various console types connected or assigned to underlying target machines. The console management engine can maintain a console translation table which invokes particular interfaces, data formats, ports, and/or other parameters of specific console packages used for underlying sets of machines. The console management engine can thereby present a unified interface to systems administrators or other users.

Systems and methods for integrated console management interface

The present invention provides a unified provisioning environment, which comprehensively manages the tasks related to software provisioning. In particular, the present invention manages software provisioning using a hierarchy of commands. The lowest level in the hierarchy comprises distribution commands, which primarily handle base operating system specific tasks of provisioning. The second level comprises profile commands, which associate a configuration file, such as a Linux kickstart file, with a distribution and optionally allow for customization. The third level comprises system commands, which associate remote systems that are involved with the provisioning of the software. The fourth level comprises repository commands, which address configurations and tasks related to updating the software, remote installation procedures, and optionally customizing the software.

Method and system for provisioning software

Methods and systems for provisioning software

Embodiments relate to systems and methods for network command delegation using auto-discovered pathways. A network management server can generate configuration or other commands to transmit to a set of supervisory hosts, which in turn relay the commands to an underlying set of hosts and/or targets. A network map can be maintained specifying pathway(s) to the supervisory hosts and/or underlying hosts and/or targets for delivery of the commands. The pathway(s) can be automatically generated using a discovery tool which probes connections to the supervisory host(s) and/or underlying hosts/targets, and records that information to a network map. The most efficient pathways on a total-hop, transit time or other basis can be identified. A systems administrator at the network management server can issue compact commands that are automatically disseminated to destination hosts/targets over large-scale and geographically diverse networks, without manually specifying pathways. Multiple layers of supervisory hosts can be used.

Growing community of inventors

Morrisville, NC, United States of America

Michael P DeHaan