公开(公告)号：US5708812A

公开(公告)日：1998-01-13

申请号：US588344

申请日：1996-01-18

申请人： Clifford P. Van Dyke ,  Michael M. Swift ,  Keith W. Logan ,  Pradyumna K. Misra

发明人： Clifford P. Van Dyke ,  Michael M. Swift ,  Keith W. Logan ,  Pradyumna K. Misra

IPC分类号： G06F9/44 ,  G06F17/60

CPC分类号： G06F8/00 ,  Y10S707/99939 ,  Y10S707/99953

摘要： A method and apparatus are described for facilitating the migration of accounts from a source domain to a target domain in a computer network without affecting the capability of users and services associated with the source domain to access source domain resources after the users' and services' accounts have been migrated to the target domain. Migrating source domain accounts is facilitated by a dual-identity Domain Controller having simultaneous access to replicating mechanisms of both the source domain and the target domain. When accounts are migrated to a directory service of objects for the target domain, the accounts are modified to include security information defining access rights of the migrated accounts within the target domain. Security information relating to an account's access rights in the source domain is preserved in the migrated account stored in the target domain directory service of objects databases.

摘要翻译： 描述了一种方法和装置，用于促进帐户从计算机网络中的源域迁移到目标域，而不影响用户和服务帐户之后的与源域相关联的用户和服务的访问源域资源的能力 已迁移到目标域。 双域身份域控制器可以同时访问源域和目标域的复制机制来促进迁移源域帐户。 当帐户迁移到目标域的对象的目录服务时，会修改帐户以包括定义目标域中已迁移帐户的访问权限的安全信息。 与存储在对象数据库的目标域目录服务中的迁移帐户中保留与源域中帐户访问权限相关的安全信息。

公开(公告)号：US5968121A

公开(公告)日：1999-10-19

申请号：US910412

申请日：1997-08-13

申请人： Keith W. Logan ,  Pradyumna K. Misra ,  Paul J. Leach ,  Clifford P. Van Dyke ,  Dave D. Straube ,  Arnold S. Miller

发明人： Keith W. Logan ,  Pradyumna K. Misra ,  Paul J. Leach ,  Clifford P. Van Dyke ,  Dave D. Straube ,  Arnold S. Miller

IPC分类号： G06F12/00 ,  G06F15/00 ,  G06F17/30 ,  H04L29/06 ,  H04L29/08 ,  H04L29/12

CPC分类号： H04L29/12047 ,  H04L29/12009 ,  H04L41/0893 ,  H04L41/12 ,  H04L61/15 ,  H04L67/1002 ,  H04L67/1008 ,  H04L67/101 ,  H04L67/1021 ,  H04L67/16 ,  H04L67/18 ,  H04L41/0233 ,  H04L67/1095 ,  H04L69/329

摘要： A network directory and naming service include fields for identifying instances of network resources and other objects by both logical and topological grouping. This combination of information facilitates automated efficient decision making with regard to replication of resources and updating the replicas in response to changes. The combination of logical and topological identification for resources also facilitates selection of a close replica in instances where a client requests access to a resource, such as a server, for which communicatively local and remote instances exist.

摘要翻译： 网络目录和命名服务包括用于通过逻辑和拓扑分组来标识网络资源和其他对象的实例的字段。 信息的这种组合促进了关于资源的复制和响应于变化来更新副本的自动化的有效决策。 资源的逻辑和拓扑识别的组合还有助于在客户端请求访问诸如服务器的资源的实例中选择紧密副本，对于通信本地和远程实例存在的资源。