Secure virtualized servers

A system for providing secure access to physical resources via a partitionable virtual input/output server in a virtualized environment, wherein the physical resources are partitioned using Kerberos security, the system comprising:

• a computer readable storage medium with program instructions stored thereon;
• and
• one or more processors configured to execute the program instructions to perform a method comprising:
• receiving, from an administrator, a request to access the physical resources, the administrator a user of a cloud tenant, wherein the tenant is assigned to a particular working load partition (WPAR) of a plurality of WPARs hosted on a virtualized server in the virtualized environment, and wherein the physical resource are assigned to the particular WPAR;
• accessing, in response to the request, a remote Kerberos server, the remote Kerberos server hosted in a private domain, and the remote Kerberos server able to authenticate access to the physical resource;
• receiving, from the Kerberos server, a valid ticket,
• granting, to the administrator, based on the valid ticket, and for a lifetime of the ticket, access to the physical resources via access to the WPAR.

A computer program product for providing secure access to physical resources via a partitionable input/output server in a virtualized environment, wherein the physical resources are partitioned using Kerberos security, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, wherein the computer readable storage medium is not a transitory signal per se, the program instructions executable by a computer processing circuit to cause the circuit to perform the method comprising:

• receiving, from an administrator, a request to access the physical resources, the administrator a user of a cloud tenant, wherein the tenant is assigned to a particular working load partition (WPAR) of a plurality of WPARs hosted on a virtualized server in the virtualized environment, and wherein the physical resources are assigned to the particular WPAR;
• accessing, in response to the request, a remote Kerberos server, the remote Kerberos server hosted in a private domain, and the remote Kerberos server able to authenticate access to the physical resource;
• receiving, from the Kerberos server, a valid ticket,
• granting, to the administrator, based on the valid ticket, and for a lifetime of the ticket, access to the physical resources via access to the WPAR.