Application-access authentication agent
View Patent ↗In response to requests from a manager to the agents for connections to the applications executing, the agents authenticate the manager. In response to the authenticating, the agents establish connections to the applications. In response to the establishing of connections, the agents provide the connections to the manager.
1. A process comprising:
In response to requests from a manager for connections to applications executing on servers, authenticating said manager by agents executing using a processor on said servers, said agents having root-level access privileges to said applications, different passwords being required for root level access to each of said servers and each of said applications, a same certificate being used in authenticating said manager by each of said agents on said servers;
in response to said authenticating, establishing, using said root-level access privileges, connections to said applications by said agents; and
in response to said establishing, providing, by said agents to said manager said connections to said applications;
prior to said authenticating of said manager by said agents, authenticating, by said servers, said manager.
2. A process as recited in claim 1 further comprising:
in response to said authenticating by said servers, said manger installing said agents on said servers.
3. A process as recited in claim 2 further comprising, prior to said authenticating of said manager by said agents, said agents listening for said manager on specified virtual ports and not on other virtual ports.
4. A process as recited in claim 1 further comprising said manager updating said applications using said connections.
5. A process as recited in claim 1 wherein said establishing includes bypassing external-user authenticators included in said applications and used to authenticate users to said applications.
6. A system comprising: storage media encoded with code that, when executed by processors, implements plural agents on plural servers, said agents accepting a same certificate for authentication, each of said agents including:
a manager interface to interface with a manager to receive or fulfill a request by said manager for access to an application executing on a same server as said agent, said manager interface including an authenticator for authenticating said manager using said certificate not required by said application and not required by an operating system executing on said server for root-level access; and
an application interface to provide, using root-level access privileges of said agent to said application, a connection between said agent and said application so that said manager interface provides, in response to said request, a connection between said manager and said application.
7. A system as recited in claim 6 further comprising said processor.
8. A system as recited in claim 6 wherein said code further implements said application, said application including an external-user authenticator for authenticating a user requesting access to said application, said agent being configured to bypass said user authenticator when providing said connection.
9. A system as recited, in claim 6 wherein said code further implements an operating system executing on said server, said operating system including an authenticator to authenticate said manager for the purpose of installing said agent, said authenticator requiring a password for root-level access to said application, said password not being required by said agent to authenticate said manager.
10. A system as recited in claim 6 wherein said code further implements each of said agents having an authenticator that uses said certificate to authorize said manager.