Delegated authorization via chassis management controller
An information handling system may include a management controller; and a plurality of target information handling systems each including a target management controller that is communicatively coupled to the management controller. The information handling system may be configured to: receive, at a particular target management controller and from a client information handling system, a request for management associated with the particular target management controller; perform, at the management controller, validation of a token associated with the request; and based on the validation, cause the particular target management controller to service the request.
1. An information handling system comprising:
a management controller; and
a plurality of target information handling systems each including a target management controller that is communicatively coupled to the management controller;
wherein the information handling system is configured to:
receive, at a particular target management controller and from a client information handling system, a request for management associated with the particular target management controller;
perform, at the management controller, validation of a token associated with the request; and
based on the validation, cause the particular target management controller to service the request;
wherein the management controller is a chassis management controller, and wherein the management controller and the target management controllers are communicatively coupled to one another via a secure chassis-internal network.
2. The information handling system of claim 1 , wherein the target management controllers are baseboard management controllers.
3. The information handling system of claim 1 , wherein the plurality of target information handling systems comprises a cluster of information handling system each including a separate chassis.
4. The information handling system of claim 1 , wherein the validation of the token includes transmitting a request to an external authorization server.
5. A method comprising:
an information handling system that includes a management controller and a plurality of target information handling systems each including a target management controller that is communicatively coupled to the management controller receiving, at a particular target management controller and from a client information handling system, a request for management associated with the particular target management controller;
the management controller performing validation of a token associated with the request; and
based on the validation, the management controller causing the particular target management controller to service the request;
wherein the management controller is a chassis management controller, and wherein the management controller and the target management controllers are communicatively coupled to one another via a secure chassis-internal network.
6. The method of claim 5 , wherein the target management controllers are baseboard management controllers.
7. The method of claim 5 , wherein the plurality of target information handling systems comprises a cluster of information handling system each including a separate chassis.
8. The method of claim 5 , wherein the validation of the token includes transmitting a request to an external authorization server.
9. An article of manufacture comprising a non-transitory, computer-readable medium having computer-executable code thereon that is executable by a processor of an information handling system that includes a management controller and a plurality of target information handling systems each including a target management controller that is communicatively coupled to the management controller, the code being executable for:
receiving, at a particular target management controller and from a client information handling system, a request for management associated with the particular target management controller;
performing, by the management controller, validation of a token associated with the request; and
based on the validation, causing, by the management controller, the particular target management controller to service the request;
wherein the management controller is a chassis management controller, and wherein the management controller and the target management controllers are communicatively coupled to one another via a secure chassis-internal network.
10. The article of claim 9 , wherein the target management controllers are baseboard management controllers.
11. The article of claim 9 , wherein the plurality of target information handling systems comprises a cluster of information handling system each including a separate chassis.
12. The article of claim 9 , wherein the validation of the token includes transmitting a request to an external authorization server.