International Business Machines Corporation

Ron S Shapiro

Lior Shlomov

Ronen Gazit

Ariel Waizel

Guy-Arie Yur

Orit Nissan-Messing

Ehood Garmiza

Assaf Yaari

Provided are a computer program product, system, and method for generating master and wrapper keys for connected devices in a key generation scheme. For each of the devices, a wrapped master key comprising a master key for the device and a wrapper key is stored. The wrapper keys for a plurality of the devices are generated by another of the devices. For each of a plurality of the devices, the master key for the device is used to generate the wrapper key for a target device comprising another of the devices. For each of the devices, the wrapper key for the device is used to decrypt the stored wrapped master key. At least one of the devices uses the master key for the device to encrypt and decrypt data at the device.

Generating master and wrapper keys for connected devices in a key generation scheme

Methods, computing systems and computer program products implement embodiments of the present invention that include associating one or more client domains with a computer executing an LDAP client, defining one or more client roles for each of one or more client domains, and associating one or more privileges with each of the client roles. Upon detecting a login of a client user having a client user name, the client user name is conveyed to an LDAP server, and in response, one or more client groups are received from the LDAP server, each given client group comprising a server role and a server domain. For each received client group having a respective server domain matching a given client domain, the respective server role is matched to a given client role, and the one or more privileges associated with the given client role is assigned to the client user.

Encoding LDAP role and domain information in a fixed format

Methods, computing systems and computer program products implement embodiments of the present invention that include configuring multiple storage system resources to manage a storage entity distributed among the storage system resources. Upon receiving, by a first given storage system resource from a host computer, an I/O request for data in the storage entity, a second given storage system resource responsible for managing the storage entity data referenced in the I/O request is identified, and the I/O request is forwarded to the second given storage system resource. Upon receiving the forwarded I/O request, the second given storage system resource performs a data compression operation while processing the I/O request, and conveys a result of the I/O operation to the first given storage system resource. Upon receiving the result from the second given storage system resource, the first given storage system resource forwards the result to the host computer.

Data compression for grid-oriented storage systems

Growing community of inventors

Tel Aviv, Israel

Ron S Shapiro