Maintaining dual-party authentication requirements for data retention compliance within a distributed server environment
Described is a system for maintaining dual-party authentication requirements for data retention compliance in a distributed storage environment that includes servers or nodes with remote access components. When administering a data retention policy, an operating system component may require a dual-party authentication mechanism to prevent data deletion, while a different authentication mechanism may control access to the remote access components. Access to the remote access component by a single privileged user, however, may enable overriding or compromising the retention lock compliance implemented by the operating system. Accordingly, the system may tie the dual-party authentication requirement to the authentication mechanism of the remote access components.
1. A system comprising:
one or more processors; and
a non-transitory computer readable medium storing a plurality of instructions, which when executed, cause the one or more processors to:
apply a retention lock to data stored by a storage system, the retention lock requiring a dual-party authentication to modify the data, the dual-party authentication requiring credentials from a first authorized user and a second authorized user, the storage system including a plurality of servers each associated with a corresponding remote access controller that allows a third authorized user to modify a storage configuration associated with the storage system;
receive, from the first authorized user, a request to enable a retention lock compliance mode for the plurality of servers;
confirm credentials from the second authorized user, in response to the request to enable the retention lock compliance mode;
disable, by a configuration manager, existing user accounts associated with the remote access controller corresponding to a first server, the existing user accounts including an account associated with the third authorized user;
create, by the configuration manager, an administrative user account and a limited user account for the remote access controller corresponding to the first server, the administrative user account set to a disabled state and the limited user account set to an enabled state;
save, by the configuration manager, a user account configuration profile associated with the remote access controller corresponding to the first server;
apply, by the configuration manager, the saved user account configuration profile to at least a second server to disable existing user accounts associated with the remote access controller corresponding to the second server and create the administrative user account and the limited user account; and
activate the retention lock compliance mode for the first server and the second server, the retention lock compliance mode requiring the dual-party authentication to access either of the remote access controllers corresponding to the first server or the second server.
2. The system of claim 1 , wherein the first server is a management server for the storage system and the configuration manager is part of the management server.
3. The system of claim 1 , wherein the plurality of instructions, when executed, further cause the one or more processors to:
receive, by the configuration manager and from the remote access controller corresponding to the second server, a notification that a motherboard of the second server has been replaced; and
reapply, by the configuration manager, the saved user account configuration profile to the second server, in response to the notification that the motherboard of the second server has been replaced.
4. The system of claim 1 , wherein the plurality of instructions, when executed, further cause the one or more processors to:
apply, by the configuration manager, the saved user account configuration profile to a third server, in response to determining the third server has been added to the storage system.
5. The system of claim 1 , wherein the plurality of instructions, when executed, further cause the one or more processors to:
receive, from the first authorized user, a request to access the remote access controller corresponding to a specified server of the plurality of servers;
confirm credentials from the second authorized user, in response to the request to access the remote access controller and a determination the retention lock compliance mode is activated for the specified server;
enable, for a limited duration, the administrative user account associated with the remote access controller corresponding to the specified server;
verify credentials for the administrative user account;
allow the administrative user account to perform one or more operations associated with the specified server using the remote access controller; and
disable the administrative user account after the limited duration.
6. The system of claim 1 , wherein the dual-party authentication mechanism for the retention lock is administered by a filesystem of the storage system, and an authentication mechanism for the remote access controller is administered by components of the remote access controller independent of the filesystem.
7. The system of claim 1 , wherein the remote access controller includes one or more physical components associated with the corresponding server, and the remote access controller executes on a separate processor than the one or more processors executing an operating system of the corresponding server.
8. The system of claim 1 , wherein disabling existing user accounts associated with the remote access controller includes:
resetting a root user password for the remote access controller;
deleting the existing user accounts associated with the remote access controller; and
terminating any active user account sessions associated with the remote access controller.
9. A method comprising:
applying a retention lock to data stored by a storage system, the retention lock requiring a dual-party authentication to modify the data, the dual-party authentication requiring credentials from a first authorized user and a second authorized user, the storage system including a plurality of servers each associated with a corresponding remote access controller that allows a third authorized user to modify a storage configuration associated with the storage system;
receiving, from the first authorized user, a request to enable a retention lock compliance mode for the plurality of servers;
confirming credentials from the second authorized user, in response to the request to enable the retention lock compliance mode;
disabling, by a configuration manager, existing user accounts associated with the remote access controller corresponding to a first server, the existing user accounts including an account associated with the third authorized user;
creating, by the configuration manager, an administrative user account and a limited user account for the remote access controller corresponding to the first server, the administrative user account set to a disabled state and the limited user account set to an enabled state;
saving, by the configuration manager, a user account configuration profile associated with the remote access controller corresponding to the first server;
applying, by the configuration manager, the saved user account configuration profile to at least a second server to disable existing user accounts associated with the remote access controller corresponding to the second server and create the administrative user account and the limited user account; and
activating the retention lock compliance mode for the first server and the second server, the retention lock compliance mode requiring the dual-party authentication to access either of the remote access controllers corresponding to the first server or the second server.
10. The method of claim 9 , wherein the first server is a management server for the storage system and the configuration manager is part of the management server.
11. The method of claim 9 , further comprising:
receiving, by the configuration manager and from the remote access controller corresponding to the second server, a notification that a motherboard of the second server has been replaced; and
reapplying, by the configuration manager, the saved user account configuration profile to the second server, in response to the notification that the motherboard of the second server has been replaced.
12. The method of claim 9 , further comprising:
applying, by the configuration manager, the saved user account configuration profile to a third server, in response to determining the third server has been added to the storage system.
13. The method of claim 9 , further comprising:
receiving, from the first authorized user, a request to access the remote access controller corresponding to a specified server of the plurality of servers;
confirming credentials from the second authorized user, in response to the request to access the remote access controller and a determination the retention lock compliance mode is activated for the specified server;
enabling, for a limited duration, the administrative user account associated with the remote access controller corresponding to the specified server;
verifying credentials for the administrative user account;
allowing the administrative user account to perform one or more operations associated with the specified server using the remote access controller; and
disabling the administrative user account after the limited duration.
14. The method of claim 9 , wherein the dual-party authentication mechanism for the retention lock is administered by a filesystem of the storage system, and an authentication mechanism for the remote access controller is administered by components of the remote access controller independent of the filesystem.
15. A computer program product comprising a non-transitory computer-readable medium having a computer-readable program code embodied therein to be executed by one or more processors, the program code including instructions to:
apply a retention lock to data stored by a storage system, the retention lock requiring a dual-party authentication to modify the data, the dual-party authentication requiring credentials from a first authorized user and a second authorized user, the storage system including a plurality of servers each associated with a corresponding remote access controller that allows a third authorized user to modify a storage configuration associated with the storage system;
receive, from the first authorized user, a request to enable a retention lock compliance mode for the plurality of servers;
confirm credentials from the second authorized user, in response to the request to enable the retention lock compliance mode;
disable, by a configuration manager, existing user accounts associated with the remote access controller corresponding to a first server, the existing user accounts including an account associated with the third authorized user;
create, by the configuration manager, an administrative user account and a limited user account for the remote access controller corresponding to the first server, the administrative user account set to a disabled state and the limited user account set to an enabled state;
save, by the configuration manager, a user account configuration profile associated with the remote access controller corresponding to the first server;
apply, by the configuration manager, the saved user account configuration profile to at least a second server to disable existing user accounts associated with the remote access controller corresponding to the second server and create the administrative user account and the limited user account; and
activate the retention lock compliance mode for the first server and the second server, the retention lock compliance mode requiring the dual-party authentication to access either of the remote access controllers corresponding to the first server or the second server.
16. The computer program product of claim 15 , wherein the first server is a management server for the storage system and the configuration manager is part of the management server.
17. The computer program product of claim 15 , wherein the program code includes further instructions to:
receive, by the configuration manager and from the remote access controller corresponding to the second server, a notification that a motherboard of the second server has been replaced; and
reapply, by the configuration manager, the saved user account configuration profile to the second server, in response to the notification that the motherboard of the second server has been replaced.
18. The computer program product of claim 15 , wherein the program code includes further instructions to:
apply, by the configuration manager, the saved user account configuration profile to a third server, in response to determining the third server has been added to the storage system.
19. The computer program product of claim 15 , wherein the program code includes further instructions to:
receive, from the first authorized user, a request to access the remote access controller corresponding to a specified server of the plurality of servers;
confirm credentials from the second authorized user, in response to the request to access the remote access controller and a determination the retention lock compliance mode is activated for the specified server;
enable, for a limited duration, the administrative user account associated with the remote access controller corresponding to the specified server;
verify credentials for the administrative user account;
allow the administrative user account to perform one or more operations associated with the specified server using the remote access controller; and
disable the administrative user account after the limited duration.
20. The computer program product of claim 15 , wherein the dual-party authentication mechanism for the retention lock is administered by a filesystem of the storage system, and an authentication mechanism for the remote access controller is administered by components of the remote access controller independent of the filesystem.