Domain controller agent subscription to kerberos events for reliable transparent identification
A system for identifying network users is provided that includes a domain controller agent having a user map that is configured to receive user data, to save the user data in an updated user map and to replace the user map with the updated user map. A filtering service has the user map and is configured to receive the updated user map and to replace the user map with the updated user map. An event subscription system is configured to generate event subscription data, wherein the domain controller agent is configured to subscribe to the event subscription system and to receive the event subscription data.
1. A system for identifying network users comprising:
a domain controller agent operating on a processor and having a user map, the domain controller agent configured to receive user data, to save the user data in an updated user map and to replace the user map with the updated user map;
a filtering service operating on the processor and having the user map, the filtering service configured to receive the updated user map and to replace the user map with the updated user map; and
an event subscription system operating on the processor and configured to generate event subscription data, wherein the domain controller agent is configured to subscribe to the event subscription system and to receive the event subscription data.
2. The system of claim 1 wherein the domain controller agent is configured to directly interface with a client machine to allow the client machine to access a network.
3. The system of claim 1 further comprising an active directory coupled to the event subscription system and configured to generate the user data.
4. The system of claim 1 wherein the filtering service is a web filtering service configured to control access to the Internet by a client that is operating on the network.
5. The system of claim 1 wherein the user map includes IP address data.
6. The system of claim 1 wherein the updated user map includes IP address data.
7. A method for identifying network users comprising:
receiving user data at a domain controller agent having a user map;
saving the user data in an updated user map;
replacing the user map with the updated user map;
receiving the updated user map at a filtering service;
replacing the user map with the updated user map at the filtering service;
generating event subscription data at an event subscription system; and
subscribing to the event subscription system with the domain controller agent to receive the event subscription data.
8. The method of claim 7 wherein the domain controller agent is configured to directly interface with a client machine to allow the client machine to access a network.
9. The method of claim 7 further configuring an active directory coupled to the event subscription system to generate the user data.
10. The method of claim 7 further comprising configuring a web filtering service to control access to the Internet by a client that is operating on the network.
11. The method of claim 7 wherein the user map includes IP address data.
12. The method of claim 7 wherein the updated user map includes IP address data.
13. A method for identifying network users comprising:
receiving user data at a domain controller agent operating on a first processor and configured to provide event-based security, the domain controller having a user map;
saving the user data in an updated user map;
replacing the user map with the updated user map;
receiving the updated user map at a filtering service operating on a second processor and configured to provide web-filtering services using the user map;
replacing the user map with the updated user map at the filtering service;
generating event subscription data at an event subscription system; and
subscribing to the event subscription system with the domain controller agent to receive the event subscription data and using the event subscription data to provide the event-based security.
14. The method of claim 13 wherein the domain controller agent is configured to directly interface with a client machine to provide the event-based security so as to allow the client machine to access a network.
15. The method of claim 13 further configuring an active directory coupled to the event subscription system to generate the user data.
16. The method of claim 13 further comprising configuring a web filtering service to control access to the Internet by a client that is operating on the network.
17. The method of claim 13 wherein the user map includes IP address data.
18. The method of claim 13 wherein the updated user map includes IP address data.
19. The method of claim 13 wherein the updated user map includes IP address data extracted from event objects.
20. The method of claim 13 wherein the domain controller is configured to subscribe to a ticket service to authenticate a user prior to providing the event-based security.