International Business Machines Corporation

Theodore J Shrader

Bruce Arland Rich

Shih-Gong Li

Michael Bradford Ault

Ernst Robert Plassmann

Shaw-Ben Shi

Mickella Ann Rosiles

Garry Lee Child

Davis Kent Soper

John Lawrence Bunce

Clifford Jay Spinac

Michael Pierre Carlson

Indran Naick

Keith J Scully

Kenneth Ray Banning

David Kingsley Clark

George P Erwin-Grotsky

Alejandra Sanchez-Frank

Julie Louise Gilbreath

Rodney Carl Burnett

Mary Wier Ferguson

George Edward Dever, Jr

Diane Louise Skeel

Barbara Jean Jensen

Methods, computer program products and systems are provided for navigating a display of a table in a computer application that includes enabling a context sensitive action menu, detecting activation of the action menu in the displayed table, and executing a table display control instruction from the context sensitive action menu to reformat and redisplay the table in a collapsed or an expanded format around one or more selected cells of the table. The display instruction indicates which columns, etc. are to be reformatted. Further steps may include populating an array with data from corresponding cells of the table and executing an array display control instruction to display at least a portion of the array on an action menu display panel. Navigation tools provide selection of array elements and reformatting and redisplaying the table in the collapsed or the expanded format around a table cell corresponding to the selected array cell.

Navigating table data with mouse actions

A method for saving and restoring collaborative applications to a selected earlier time, may include saving, by a processing device, content for each collaborative application of a plurality of collaborative applications as a user uses each of the collaborative applications. The method may additionally include restoring each collaborative application to a selected earlier time in response to the selected earlier time being selected by the user. The method may further include presenting the content of each collaborative application at the selected earlier time to the user in response to each collaborative application being restored to the selected earlier time, wherein each collaborative application is presented in an original context from the selected earlier time.

Saving and restoring collaborative applications in context

A method of executing Common Gateway Interface (CGI) programs in a computer network having a Web client and a Web server, the server connectable to a secure distributed file system of a distributed computing environment. If a Web client user request requires CGI processing, the requested CGI program is run in a new process spawned from the Web server thread and executing within the context of the temporary user identity set up with the proper DCE credentials. This function is effected by saving the name and path of the user-requested CGI program and then substituting the name and path of an encapsulation CGI program. The encapsulation CGI program starts the user-requested CGI program in a new process (i.e. a desktop) within the context of the temporary user identity (having proper DCE credentials). The encapsulation program thus ensures that the CGI program being executed cannot harm the default Web server desktop.

Method for executing a user-requested CGI program in a new

A test page including a statement invoking an executable periodically reloading the test page is placed on a Web server having a security plug-in to be tested. The test page may include multiple frames, each containing a reference requesting access to the same test page or each performing a different testing function. The test page may be placed in a protected directory, may include an attempt to access the contents of a file within a different protected directory, and may include attempts to access protected CGI executables or other programs or modules which may be run on the Web server. A remote browser is employed to attempt to access the test page using the userid and password employed to login to the browser. Successful or unsuccessful access to the test page verifies proper operation of the security plug-in. The test page is automatically reloaded by the browser at a selected interval, and multiple frames or multiple browser instances each accessing the test page results in stress testing of the security plug-in.

Web client scripting test architecture for web server-based

An account manager plug-in for a Web server having an application programming interface (API). The plug-in is preferably a computer program product comprising a set of instructions (program code) encoded on a computer-readable substrate. This plug-in includes program code for establishing a set of one or more monitored resources (e.g., UrlCounter, ByteCounter, PageCounter and FailedLoginCounter) and for defining a threshold rule for at least one of the set of monitored resources. As Web transactions occur at the Web server, the account manager is responsive to a monitored resource exceeding a condition of a threshold rule for triggering one of a set of threshold actions. The set of threshold actions, for example, include clearing a record counter, running a given program, sending an e-mail note and disabling or enabling a user account.

Web server account manager plug-in for monitoring resources

Filter rules on a firewall between a secure computer network and a nonsecure computer network are validated from a user interface. A user interface is presented in which a test packet can be defined. The user interface includes controls for defining values for attributes of the test packet, wherein the attributes of the test packet are selected from a set of attributes of normal packets normally sent between the secure and nonsecure computer networks. A defined test packet is validated against a set of filter rules in the firewall or matched against the filter rules to determine those filter rules with matching attributes to the defined packet. When validating, responsive to the failure of the test packet in the validating step, the filter rule in the set of filter rules which denied the test packet is displayed.

Filter rule validation and administration for firewalls

A method of enabling persistent access by a Web server to files stored in a distributed file system of a distributed computing environment that includes a security service. A session manager is used to perform a proxy login to the security service on behalf of the Web server. Persistent operation of the session manager is ensured by periodically spawning new instances of the session manager process. Each new instance preferably initializes itself against a binding file. A prior instance of the session manager is maintained in an active state for at least a period of time during which the new instance of the session manager initializes itself. Upon receipt of a given transaction request from a Web client to the Web server, a determination is made regarding whether a new instance of the session manager process has been spawned while the Web server was otherwise idle. If so, the Web server is re-bound to the new instance of the session manager process so that the new instance of the session manager process can respond to the transaction request.

Method and apparatus for providing persistent fault-tolerant proxy login

A method of enabling a Web server to impersonate a Web client to thereby obtain access to files stored in a distributed file system of a distributed computing environment. The distributed computing environment includes a security service for returning a credential to a user authenticated to access the distributed file system. In response to receipt of a transaction request from the Web client, a determination is made whether the transaction request has originated from a user authenticated to access the distributed file system. If so, the Web server is controlled to reuse the credential of the user across multiple file accesses in the distributed file system on behalf of the Web client.

Method and apparatus for enabling a web server to impersonate a user of

A method, system and program for transforming one or more icons in an object-oriented, graphical environment. The icon transformations entail the changing of an icon from one state to another using drag and drop techniques. The user drops an input object icon onto the transformer object icon. The transformer object removes the input object from the graphical environment, changes its contents and/or attributes, and places the new output icon on the desktop. Icon transformers convert objects in a one-to-one, many-to-one, one-to-many, or many-to-many fashion.

Icon transformation system

A method of authenticating a Web client to a Web server connectable to a distributed file system of a distributed computing environment. The distributed computing environment includes a security service for returning a credential to a user authenticated to access the distributed file system. In response to receipt by the Web server of a user id and password from the Web client, a login protocol is executed with the security service. If the user can be authenticated, a credential is stored in a database of credentials associated with authenticated users. The Web server then returns to the Web client a persistent client state object having a unique identifier therein. This object, sometimes referred to as a cookie, is then used to enable the Web client to browse Web documents in the distributed file system. In particular, when the Web client desires to make a subsequest request to the distributed file system, the persistent client state object including the identifier is used in lieu of the user's id and password, which makes the session much more secure. In this operation, the cookie identifier is used as a pointer into the credential storage table, and the credential is then retrieved and used to facilitate multiple file accessess from the distributed file system. At the same time, the Web client may obtain access to Web server (as opposed to distributed file system) documents via conventional user id and password in an HTTP request.

Distributed file system web server user authentication with cookies

Committing an installation plan object for installing applications in a network. The installation plan object includes an application-in-plan object which represents an application program and a group-in-plan object which represents a group of workstations on which the application program is to be installed. As part of the commit process, the installation plan object is prevalidated by examining its child objects and adding additional child objects to the installation plan object if required, validated by examining data in the installation plan object and its child objects for errors in the data and transformed into data structures usable for a network installation engine which installs applications across a network. The installation plan further includes a response file object if the application's installation requires a response file and a customization file object which contains data to customize the response file object data for particular workstations.

Committing an install plan object for the network installation of

Administering tunneling on a firewall computer between a secure computer network and a nonsecure computer network in a web based interface is disclosed. Tunnels are displayed in graphical depictions as lines connecting icons representing network addresses. User selection of a line, will bring up a selected tunnel definition represented by the first line is displayed in another pane in the interface or a list of filter rules applicable to the tunnel. At this point, an action on the selected tunnel definition may be performed responsive to user input. Queries can be run on a tunnel definition to determine whether any existing tunnel definitions match the entered tunnel definition, or whether there are any filter rules in effect for a given tunnel definition. The results of the query are displayed in a scatter bar in another pane in the user interface, wherein locations of matches are indicated by lines through the scatter bar. A small bar is displayed proximate to the scatter bar, the small bar indicating the position of the displayed list relative to a complete list represented by the scatter bar.

Web-based administration of IP tunneling on internet firewalls

An installation plan object including application objects representing applications to be installed during an installation process and workstation objects representing the workstation on which the applications are to be installed is validated prior to executing the installation plan. According to the invention, multiple sets of communication modules, that is redirector and transport modules are capable of installing the applications on the workstations over a computer network. Therefore, the availability and compatibility of the redirectors and transports at the workstations must be assured. After the installation plan object is built by the user of application objects and workstation objects, the attributes of the application objects are examined for the communication modules which may be used for installation of the applications on the workstations. Next, the validation process determines whether the communication modules are available during the installation process at the workstations. If not, objects representing the unavailable communication modules to the installation plan such that when the installation process is executed the previously unavailable modules are provided.

Validating an installation plan containing multiple transports and

A technique for transferring a graphical object in a graphical user interface on a computer display from a source window to a target window. It is determined that a graphical object from the source window has entered the target window during a drag and drop operation. Next, it is determined that the graphical object has hit an interior boundary of the target window. The target window is scrolled so long as the graphical object continues to hit the interior boundary. Once the target location is visible in the target window, the graphical object is located at the target location at conclusion of the drag and drop operation. The invention contemplates a graphical user interface in which some target windows are scrollable during a drag and drop operation with a graphical object from a foreign window, while some windows are not. Thus, in a mixed graphical user interface, it must be determined whether the target window is scrollable during a drag and drop operation.

Scrolling a target window during a drag and drop operation

A user interface for creating or changing the structure of a relational database having multiple tables linked by keys and arranged by indices. In one form, the invention contemplates the juxtaposed depiction on a computer video display of a matrix defining the structure of a table with one or more matrices defining the linking relationships between selected columns from that and related tables. Selection and movement through the data structure is accomplished by mouse actuated cursor. Referential integrity among the database tables is maintained through the use of primary and foreign keys. The relationships of the keys and indices to the columns of the tables are clearly represented in matrix format windows which appear concurrently with table column property information.

Growing community of inventors

Austin, TX, United States of America

Theodore J Shrader