Systems and methods for credentialing of non-local requestors in decoupled systems utilizing a domain local authenticator
Embodiments as disclosed provide systems and methods that use a local authenticator within a domain to provide a credential to access a resource of the domain to a non-local requestor. When a request is received from a non-local requestor at the domain the non-local requestor can be authenticated based on the request. The local authenticator can then be accessed to obtain a credential. This credential may be the same type of credential provided to members of the domain when they authenticate using the local authenticator. The credential is provided to the non-local requestor so the non-local requestor can access the resource of the domain using the credential and authentication of the non-local requestor with respect to these accesses can be accomplished using the local domain authenticator and the credential.
1. A system, comprising:
a domain comprising a data center including an managed file transfer (MFT) Instance, including:
a processor coupled to a memory;
a set of resources including a managed file transfer service for transferring files between a set of servers by:
receiving a file transfer request from a sender to send a file to a recipient;
determining a location of the recipient;
determining a location server that is closest to the location of the recipient;
and
automatically initiating a server-to-server transfer to move the file to the location server that is closest to the location of the recipient;
a local domain authenticator for:
providing a credential for a member of the domain to use in accessing the set of resources of the domain during a session;
authenticating the credential associated with a member of the domain, and a remote authenticator which is part of a cloud based MFT system, for:
providing the credential to a non-local requestor which is a cloud command center operable for the coordination of MFT instances as part of the cloud based MFT system, and is not a member of the domain by:
receiving an authentication request from the non-local requestor outside the domain, wherein the request is to be authenticated for accessing the set of resources;
authenticating the non-local requestor using the authentication request without use of any domain credentials for the non-local requestor for any domain by verifying the authentication request using a secure protocol;
accessing the local domain authenticator to obtain the credential associated with the domain; and
providing the credential to the non-local requestor, wherein the non-local requestor can access the set of resources of the domain during a session maintained between the non-local requestor and the domain using the credential and authentication of an access of the non-local requestor to the set of resources during the session is performed using the local domain authenticator and the credential.
2. The system of claim 1 , wherein the authentication of the non-local requestor using the authentication request is accomplished using the Secure Shell (SSH) protocol.
3. The system of claim 1 , wherein authenticating a non-local requestor which is not a member of the domain includes updating session data associated with the non-local requestor to indicate that the non-local requestor has been authenticated.
4. The system of claim 3 , wherein authenticating a non-local requestor which is not a member of the domain is done by receiving a credential request from the non-local requestor and, in response to the credential request, accessing the session data for the non-local requestor to determine if the non-local requestor has been authenticated.
5. The system of claim 4 , wherein the remote authenticator has a local account with the local domain authenticator and the credential is associated with the local account.
6. The system of claim 1 , wherein the MFT instance includes a transfer server that is used to provide the remote authenticator and an authentication server is used to provide the local domain authenticator.
7. The system of claim 6 , wherein the authentication server uses OpenText Directory Services (OTDS).
8. A method, comprising:
receiving, at a remote authenticator in a domain with a set of resources, an authentication request from a non-local requestor which is not a member of the domain, wherein the request is to be authenticated for accessing the set of resources, the domain comprises a data center including a managed file transfer (MFT) Instance, the remote authenticator is part of a cloud based MFT system, the non-local requestor is a cloud command center operable for the coordination of MFT instances as part of the cloud based MFT system, and wherein the set of resources includes a managed file transfer service for transferring files between a set of servers by: receiving a file transfer request from a sender to send a file to a recipient, determining a location of the recipient, determining a location server that is closest to the location of the recipient, and automatically initiating a server-to-server transfer to move the file to the location server that is closest to the location of the recipient;
authenticating the non-local requestor using the authentication request without use of any domain credentials for the non-local requestor for any domain by verifying the authentication request using a secure protocol;
accessing a local domain authenticator to obtain a credential, wherein the credential is for a member of the domain to use in accessing the set of resources of the domain during a session; and
providing the credential to the non-local requestor, wherein the non-local requestor can access the set of resources of the domain during a session maintained between the non-local requestor and the domain using the credential and authentication of an access of the non-local requestor to the set of resources during the session is performed using the local domain authenticator to authenticate the credential.
9. The method of claim 8 , wherein the authentication of the non-local requestor using the authentication request is accomplished using the Secure Shell (SSH) protocol.
10. The method of claim 8 , wherein authenticating the non-local requestor which is not a member of the domain includes updating session data associated with the non-local requestor to indicate that the non-local requestor has been authenticated.
11. The method of claim 10 , wherein authenticating the non-local requestor which is not a member of the domain is done by receiving a credential request from the non-local requestor and, in response to the credential request, accessing the session data for the non-local requestor to determine if the non-local requestor has been authenticated.
12. The method of claim 11 , wherein the remote authenticator has a local account with the local domain authenticator and the credential is associated with the local account.
13. The method of claim 8 , wherein the MFT instance includes a transfer server that is used to provide the remote authenticator and an authentication server is used to provide the local domain authenticator.
14. The method of claim 13 , wherein the authentication server uses OpenText Directory Services (OTDS).