System and method for information handling system multi-level authentication for backup services
Access to backup information, such as at network attached storage compliant with NDMP, is managed by interfacing a backup authentication mechanism with a primary authentication system and responding to requests for backup information according to permissions defined by the primary authentication system. A data management application requests access to backup information with an NDMP MD5 hash and includes a domain name and password for an LDAP or AD authentication through a pluggable authentication module. Access to backup information is provided based upon the permissions associated with the domain of the primary authentication mechanism.
1. An information handling system comprising:
an information processing node having a processor operable to generate information for storage and retrieve information from storage, the information processing node accessing information according to a first authentication mechanism;
a storage node having a processor and a storage medium, the storage node interfaced with the information processing node through a network, the storage medium storing information according to a second authentication mechanism;
an authentication node interfaced with the network and operable to authenticate information requests under the first authentication mechanism; and
a data management application executing on the information processing node processor and operable to interact with the storage node to retrieve information, the data management application further operable to authenticate communications with the storage node by a message of the second authentication mechanism that includes information of the first authentication mechanism;
wherein the storage node is further operable to authenticate communications of the data management application by communicating the information of the first authentication mechanism to the authentication node;
wherein the second authentication mechanism comprises a Network Data Management Protocol (NDMP) hash code and the first authentication mechanism comprises a Light Weight Directory Access Protocol (LDAP) or an Active Directory;
wherein the information of the first authentication mechanism comprises a domain of less than all information stored on the storage medium.
2. The information handling system of claim 1 wherein the storage node comprises network attached storage.
3. The information handling system of claim 2 wherein the second authentication mechanism comprises an MD5 hash.
4. The information handling system of claim 2 wherein the authentication node comprises pluggable authentication module.
5. A method for managing access to backup information stored on a backup device, the method comprising:
requesting with a network device the backup information from the backup device using a backup authentication mechanism and including information of a primary authentication mechanism;
requesting with the backup device from an authentication node access permission of the network device based upon the information of the primary authentication mechanism;
challenging the network device by the backup device using the backup authentication mechanism; and
responding to the challenging with the network device by using the backup authentication mechanism and including the information of a primary authentication mechanism;
wherein the information of the primary mechanism comprises a domain, the method further comprising allowing access by the network device only to the backup information associated with the domain;
wherein the backup authentication mechanism comprises an NDMP hash code and the primary authentication mechanism comprises an LDAP or an Active Directory.
6. The method of claim 5 wherein the backup authentication mechanism comprises an MD5 hash.
7. The method of claim 5 wherein the primary authentication mechanism comprises a pluggable authentication module executing on the authentication node.
8. The method of claim 5 further comprising:
receiving at the backup node the access permission from the authentication node; and
allowing access by the network device to less than all of the information stored by the backup device according to the access permission.
9. A system for managing access to backup information stored at a network attached storage, the system comprising:
the network attached storage having a processor;
a data management application operable to request access to backup information using a backup authentication mechanism that communicates a primary network access domain associated with a primary authentication mechanism;
an authentication module executing at the network attached storage processor and operable to allow access to the backup information by the data management application by forwarding the primary network access domain to a primary network authentication node, receiving authorization from the primary network authentication node for access to the backup information by the data management application and providing access to the data management application only for the backup information associated with the primary network access domain;
wherein the backup authentication mechanism comprises an NDMP hash code and the primary authentication mechanism comprises an LDAP or an Active Directory.