AUTHENTICASTING AND AUTHORIZING A USER IN AN EMULATED ENVIRONMENT
The present disclosure relates generally to computer architecture and infrastructure for guest operating systems executing on a host operating system. A method of authenticating and authorizing a user in an emulated computing environment is disclosed. The method includes receiving a request by a user operating on a guest operating system and having user credentials to invoke a process in a secure sandbox on a host operating system; searching a pool of credentials for the user credentials in the host operating system; associating the user credentials with the process such that all services running on a guest operating system have the same credentials as a host operating system; and after the process has completed, returning the user credentials to the pool.
1 . A method of authenticating and authorizing a user in an emulated computing environment, the method comprising:
receiving a request by a user operating on a guest operating system and having user credentials to invoke a process in a secure sandbox on a host operating system;
searching a pool of credentials for the user credentials in the host operating system;
associating the user credentials with the process such that all services running on a guest operating system have the same credentials as a host operating system; and
after the process has completed, returning the user credentials to the pool.
2 . The method of claim 1 , wherein searching includes searching a pool of user IDs and Group IDs for the user credentials in the host operating system.
3 . The method of claim 2 , further comprising matching a user ID and group ID pair to the user credentials.
4 . The method of claim 3 , further comprising pulling the pair from the pool for further user.
5 . The method of claim 4 , wherein after the process includes after the process has completed, returning the user ID and group ID pair to the pool.
6 . The method of claim 3 , further comprising using the user ID and group ID for each successive request by the user.
7 . The method of claim 1 , further comprising using the user credentials to enforce authentication and authorization rules.
8 . The method of claim 7 , wherein using the user credentials includes using the user credentials to enforce authentication and authorization rules. across the guest operating system and the host operating system.
9 . The method of claim 1 , further comprising communicating between the guest operating system and the secure sandbox through a secure tunnel having loopback networking.
10 . The method of claim 9 , wherein communicating includes communicating through a secure tunnel having an encrypted communication path between the guest operating system and the host operating system.
11 . A computer program product for authenticating and authorizing a user in an emulated computing environment, comprising:
a non-transitory computer-readable medium comprising a set of instructions that when executed by a programmable computing device causes the computing device to implement a method for configuring a set of network devices, the method comprising:
receiving a request by a user operating on a guest operating system and having user credentials to invoke a process in a secure sandbox on a host operating system;
searching a pool of credentials for the user credentials in the host operating system;
associating the user credentials with the process such that all services running on a guest operating system have the same credentials as a host operating system; and
after the process has completed, returning the user credentials to the pool.
12 . The computer program product of claim 11 , wherein searching includes searching a pool of user IDs and Group IDs for the user credentials in the host operating system.
13 . The computer program product of claim 12 , further comprising matching a user ID and group ID pair to the user credentials.
14 . The computer program product of claim 13 , further comprising pulling the pair from the pool for further user.
15 . The computer program product of claim 14 , wherein after the process includes after the process has completed, returning the user ID and group ID pair to the pool.
16 . The computer program product of claim 13 , further comprising using the user ID and group ID for each successive request by the user.
17 . The computer program product of claim 11 , further comprising using the user credentials to enforce authentication and authorization rules.
18 . The computer program product of claim 17 , wherein using the user credentials includes using the user credentials to enforce authentication and authorization rules. across the guest operating system and the host operating system.
19 . The computer program product of claim 1 , further comprising communicating between the guest operating system and the secure sandbox through a secure tunnel having loopback networking.
20 . The computer program product of claim 19 , wherein communicating includes communicating through a secure tunnel having an encrypted communication path between the guest operating system and the host operating system.