Systems and methods for authenticating credentials for management of a client
View Patent ↗A method and system for authenticating credentials for management of a client is disclosed. The credentials are provided to a verification application. The credentials are authenticated to an authentication application. A connection between the authentication application and a security server is established. An authenticator is invoked. Administrative rights associated with the credentials are verified. An authentication certificate indicating the administrative rights is sent to the client.
1. A method for authenticating credentials for management of a node, the method being implemented by a computer system, the method comprising:
providing the credentials to a verification application on a managed node;
establishing a secure connection between the managed node and an authentication application located remotely from the managed node;
sending the credentials via the secure connection;
authenticating the credentials to the authentication application via basic authentication, wherein the credentials are sent via the secure connection before they are authenticated;
establishing a connection between the authentication application and a security server using an authentication procedure that is different from the authentication used with the secure connection;
invoking an authenticator on the security server;
receiving the credentials at the authenticator from the authentication application;
verifying administrative rights associated with the credentials using the authenticator on the security server; and
sending, from the authenticator, an authentication certificate indicating the administrative rights associated with the credentials to the managed node,
wherein both the secure connection and the connection are used for authenticating the managed node such that the managed node does not have direct access to the authenticator.
2. The method of claim 1 , wherein verifying the administrative rights is performed using the authentication procedure that is different from the authentication used with the secure connection, wherein this different authentication procedure comprises the authenticator using a challenge/response authentication protocol.
3. The method of claim 1 , wherein verifying the administrative rights is performed using the authentication procedure that is different from the authentication used with the secure connection, wherein this different authentication procedure comprises the authenticator implementing an operating system based authentication protocol.
4. The method of claim 1 , wherein verifying the administrative rights is performed using the authentication procedure that is different from the authentication used with the secure connection, wherein this different authentication procedure comprises the authenticator using a hyper-text transfer protocol authentication mechanism.
5. The method of claim 1 , wherein the authenticator comprises a web service.
6. The method of claim 1 , wherein the authenticator is implemented on a domain controller.
7. The method of claim 1 , wherein the credentials comprise a username and a password.
8. The method of claim 7 , further comprising associating the username and the password with the administrative rights of a system administrator.
9. The method of claim 1 , further comprising sending the certificate to a management agent.
10. The method of claim 1 , further comprising issuing a limited rights authentication certificate to the managed node indicating the limited administrative rights associated with the credentials.
11. The method of claim 1 , wherein establishing a connection comprises implementing an internet based management gateway application.
12. The method of claim 1 , wherein establishing a secure connection comprises implementing a secure sockets layer connection and an internet based management gateway application.
13. The method of claim 1 , wherein the administrative rights are verified by a web service using a domain controller using a challenge/response authentication protocol, and wherein the authentication certificate is sent to the managed node.
14. The method of claim 13 , wherein communications between the managed node and the domain controller are sent via a network that comprises a management gateway.
15. A computer system that is configured for authenticating credentials for management of a client, the computer system comprising:
a processor; memory in electronic communication with the processor;
instructions stored in the memory, the instructions being executable to:
authenticate credentials at an authentication application via basic authentication, wherein the credentials are received via a secure connection before they are authenticated;
establish a connection between the authentication application located remotely from the client and a security server on the computer system, wherein the security server comprises an authenticator, wherein the connection is established using an authentication procedure that is different from the authentication used with the secure connection;
invoke the authenticator on the computer system;
receive credentials at the authenticator from the authentication application, wherein the credentials were previously received from the client and were sent from the authentication application to the authenticator;
verify administrative rights associated with the credentials using the authenticator on the security server; and
send an authentication certificate indicating the administrative rights associated with the credentials to the client, wherein both the secure connection and the connection are used for authenticating the client such that the client does not have direct access to the authenticator.
16. The system of claim 15 , wherein the verification of the credentials is performed using the authentication procedure that is different from the authentication used with the secure connection, wherein this different authentication procedure comprises a challenge/response authentication protocol.
17. The system of claim 15 , wherein the verification of the credentials is performed using the authentication procedure that is different from the authentication used with the secure connection, wherein this different authentication procedure comprises a hyper-text transfer protocol authentication mechanism.
18. The system of claim 15 , wherein the secure connection implements a secure sockets layer connection and an internet based management gateway application.
19. The system of claim 15 , wherein the authenticator comprises a web service.
20. The system of claim 15 , wherein the authenticator is implemented on a domain controller.
21. A non-transitory computer-readable medium comprising executable instructions for authenticating credentials for management of a client, the executable instructions being executable to:
provide credentials to a verification application on the client;
establish a secure connection between the client and an authentication application located remotely from the client;
send the credentials via the secure connection;
authenticate the credentials to the authentication application via basic authentication, wherein the credentials are sent via the secure connection before they are authenticated;
establish a connection between the authentication application and a security server using an authentication procedure that is different from the authentication used with the secure connection, wherein the security server comprises an authenticator;
invoke the authenticator on the security server;
receive credentials at the authenticator from the authentication application, wherein the credentials were previously received from the client and were sent from the authentication application to the authenticator;
verify administrative rights associated with the credentials using the authenticator on the security server; and
issue, by the security server, an authentication certificate indicating the administrative rights associated with the credentials to the client,
wherein both the secure connection and the connection are used for authenticating the client such that the client does not have direct access to the authenticator.
22. The non-transitory computer-readable medium of claim 21 , wherein the executable instructions that are executable to authenticate the credentials comprise executable instructions that are executable to authenticate using the authentication procedure that is different from the authentication used with the secure connection, wherein this different authentication procedure uses a challenge/response authentication protocol.
23. The non-transitory computer-readable medium of claim 21 , wherein the executable instructions that are executable to establish a secure connection comprise executable instructions that are executable to implement a secure sockets layer connection and an internet based management gateway application.