Server for authenticating clients using file system permissions
AssigneeHewlett-Packard Development Company, L.P.
InventorJames R Curtis
Life of this patent
Estimating the term…
Abstract
A computer system comprises a server that serves a plurality of clients and performs client authentication and authorization during client login to the server using file system permissions specified for domain sockets. The server creates a domain socket file for individual users during initialization which sets permissions enabling user access to the domain socket file, monitors file descriptors for received connection requests from client processes, and either opens a requesting client process with permission-enabled user access or denies access to an unauthorized client process.
Claims13
A method comprising:
- a server process running on a computer system receiving user requests from users via respective user-domain-socket files having respective different socket identities;
- said server process determining respective privilege levels for said users as a function of said socket identities;
- said server process responding to each of said user requests in accordance with the privilege level determined for the user issuing the request;
- and
- setting ownership and permissions to enable only a respective user to access a respective user-domain-socket file.
A computer system comprising:
- non-transitory computer-readable storage media encoded with user-domain-socket files, said user-domain-socket files having respective system file permissions for determining which users can write respective user requests to which user-domain-socket files, each of said users having an associated privilege level;
- and
- one or more processors for,
- executing a server process so that said server process responds to requests received via respective ones of said user-domain-socket files in accordance with the respective privilege levels for the respective users, and
- for setting ownership and permissions to enable only a respective user to access a respective user-domain-socket file.
A system comprising non-transitory computer-readable storage media encoded with software that, when executed by one or more computer processors, provides for:
- a server process running on a computer system receiving user requests from respective users via respective user-domain-socket files having respective different socket identities;
- said server process determining respective privilege levels for said users as a function of said socket identities;
- said server process responding to said user requests in accordance with the respective privilege levels associated with the respective users issuing said requests;
- and
- setting ownership and permissions to enable only a respective user to access a respective user-domain-socket file.
Dependencies are inferred from the claim text.