Abstract: A method, system, apparatus, and computer program product is presented for management of a distributed data processing system. A network management framework dynamically adapts database operations so as to maximize system performance. A skeletonization mechanism is presented in which some objects are merely represented in a database cache as a skeleton object. A skeleton object holds only a fraction of an object's full complement of data; the skeleton object remains associated with its complete object, also termed its corresponding full object or non-skeleton object, which remains stored within its original location within a database. Skeletonized data can be updated on an as-needed or on-demand basis or when otherwise convenient; at that time, a skeleton handler can detect when a request is made for the object, retrieve the remaining data from persistent storage, and then mark the cached object as being a full object or non-skeleton object.

Abstract: A method and system for processing authenticated data objects. An authenticated data object utility allows a user to view and edit the contents of data objects embedded within an authenticated data object via a graphical user interface. Graphical objects represent the data objects embedded within an authenticated data object. A user may drag and drop objects onto other objects within the authenticated data object, and the authenticated data object utility automatically performs the necessary authenticating operations. Logical associations between data objects contained within the authenticated data object, such as between certificates and recipient information objects, are determined or created, and the logical associations are displayed using visual indicators. As data objects are added or deleted through user actions on the graphical objects, the visual indicators are updated to reflect any updates to the logical associations between the data objects.

Abstract: A method and system for processing signed data objects in a data processing system is presented. A signed data object utility allows a user to view and edit the contents of data objects embedded within a signed data object via a graphical user interface. Graphical objects represent the data objects embedded within a signed data object. A user may drag and drop objects onto other objects within the signed data object, and the signed data object utility automatically performs the necessary signing operations. Logical associations between data objects contained within the signed data object are determined, and the logical associations are displayed using visual indicators between graphical objects representing the associated data objects. As data objects are added or deleted, the visual indicators are updated to reflect any updates to the logical associations. The user may direct other operations on the signed data object through the graphical user interface.

Abstract: A method is provided for determining an identity of a browser in an Java environment in which an intermediary program masks the browser's identity. The method begins by querying an operating system process table for information identifying the browser. Thereafter, a Java properties table including the information from the process table is set. In response to a request from a calling program (e.g., an applet class) for the browser identity, a getProperty method is then called to retrieve the browser identity from the properties table. The browser identity is then returned to the calling program.

Abstract: An architecture for extending the Java security model to allow a user or administrator to explicitly deny permissions. By itself, the Java 2 security model does not allow additions to the collections of policy permissions after they have been loaded from the Java policy file. The inventive architecture allows Java applets and applications to dynamically prompt the user to deny a permission that does not exist in the Java policy file. If the user denies the permission, the present invention denies the permission for the ProtectionDomain to which the class asking for the permission belongs. Attributes for the denied permission may be set during runtime and saved across browser sessions.

Abstract: A method, system, and computer program product for discovering status of a network topology. A network management framework provides the ability to specify a method for determining how to gather status of a data processing system. A data gathering technique (DGT) may be dynamically adjusted to discovery or monitoring of devices within the data processing system. Different data gathering techniques may be employed in an effort to discover or monitor the devices. In addition, results of previous network data gathering may be stored for later use. These stored results may used to develop an order of relative capabilities for a managed device or devices as compared to other device or devices in the same network. Discovery and monitoring information may be obtained about one device or N devices within the network.

Abstract: An architecture for extending the Java security model to allow a user or administrator to grant permissions dynamically. By itself, the Java 2 security model does not allow additions to the collections of policy permissions after they have been loaded from the Java policy file. The inventive architecture allows Java applets and applications to dynamically prompt the user to grant a permission that does not exist in the Java policy file. If the user grants the permission, the present invention grants the permission for the ProtectionDomain to which the class asking for the permission belongs. Attributes for the dynamic permission may be set during runtime and saved across browser sessions.

Abstract: A method, system, apparatus, and computer program product is presented for management of a distributed data processing system. A network management framework dynamically adapts database operations so as to maximize system performance. A skeletonization mechanism is presented in which some objects are merely represented in a database cache as a skeleton object. A skeleton object holds only a fraction of an object's full complement of data; the skeleton object remains associated with its complete object, also termed its corresponding full object or non-skeleton object, which remains stored within its original location within a database. Skeletonized data can be updated on an as-needed or on-demand basis or when otherwise convenient; at that time, a skeleton handler can detect when a request is made for the object, retrieve the remaining data from persistent storage, and then mark the cached object as being a full object or non-skeleton object.

Abstract: A method, system, apparatus, and computer program product is presented for management of a distributed data processing system. Resources within the distributed data processing system are dynamically discovered, and the discovered resources are adaptively monitored using the network management framework. When the network management framework detects that certain components within the network management framework may have failed, new instances of these components are started. If duplicate components are later determined to be active concurrently, then a duplicate component is shutdown, thereby ensuring that at least one instance of these components is active at any given time. After certain failover events, a resource rediscovery process may occur, and a topology database containing previously stored information about discovered resources is resynchronized with resource information about rediscovered resources.

Abstract: A method, system, apparatus, and computer program product is presented for management of a distributed data processing system on behalf of a plurality of management customers. The distributed data processing system is logically represented as a set of scopes, wherein a scope is a logical organization of network-related objects. Endpoint objects, system objects, and network objects are logically organized into a set of scopes that do not logically overlap. Each scope is uniquely assigned to a management customer. The distributed data processing system is managed as a set of logical networks in which a logical network contains a set of scopes and in which each logical network is uniquely assigned to a management customer. An administrative user may dynamically reconfigure the logical networks within the distributed data processing system while managing the logical networks for a set of customers.

Abstract: A method, system, apparatus, and computer program product is presented for management of a distributed data processing system. Resources within the distributed data processing system are dynamically discovered, and the discovered resources are adaptively monitored using the network management framework. Changes in topology are saved for review by administrative users, and administrative users may also review previous network actions that were requested to be performed by administrative users.

Abstract: A method, system, apparatus, and computer program product is presented for management of a distributed data processing system on behalf of a plurality of management customers. The distributed data processing system is logically represented as a set of scopes, wherein a scope is a logical organization of network-related objects. Endpoint objects, system objects, and network objects are logically organized into a set of scopes that do not logically overlap. Each scope is uniquely assigned to a management customer. The distributed data processing system is managed as a set of logical networks in which a logical network contains a set of scopes and in which each logical network is uniquely assigned to a management customer. An administrative user may dynamically reconfigure the logical networks within the distributed data processing system while managing the logical networks for a set of customers.

Abstract: A method, system, apparatus, and computer program product is presented for management of a distributed data processing system. A management process discovers endpoints on a network within the distributed data processing system using a network management framework, and a state of the network is determined from a collective state of discovered endpoints. Data generated by the network management framework is queued while waiting to be persisted within a distributed database. An adaptive queue management scheme controls the data flow through a set of queues and adapts its management of those queues in accordance with the collective state of the network. Administrative users of the network management framework may set configuration parameters for the adaptive queue management mechanism.

Abstract: A method, system, apparatus, and computer program product for the management of data, objects, and access within a distributed data processing system. The system may comprise a gateway-endpoint organization that allows for a highly distributed service management architecture, wherein services within this framework enable resource consumers to address resources and use resources throughout the distributed system. The distributed-framework routes action objects through the system so that the appropriate gateway receives the action object and ensures its completion and the return of status from its execution. The distributed nature of the gateways and their services allow logical routes to be dynamically determined for the action objects. In particular, the present invention is directed to a plurality of access mechanisms by which distributed services objects and related property data are stored and are accessed within a distributed data processing system.

Abstract: A system and method having multiple instances of polling engines at IP drivers, wherein the multiple polling engines are monitoring to discover the same network scope. The polling engines' polling intervals are staggered so that the polling communications do not unnecessarily clog the network and so that an apparent response time can be realized in the aggregate results of multiple instance polling. Unique IDs are used to differentiate which engine's status data is being used at any given time, should follow-up be required.

Abstract: A test/run program receives as input a list of identifiers for source pages referencing applets to be tested or run. The test/run program creates an array of the identifiers, together with parameters for each identifier, web browser to run the test under, and a number of times the source page is to be reloaded and the applets re-run. For each source page, and for each reload of a given source page, the test/run program starts the specified web browser process, loads the designated source page, and starts a fresh runtime environment for the applet. Support for a test class within the test/run program allows the applets to write success, failure, or informational results to an output file and to exit the web browser process when complete. Where a native implementation of the test class is employed, special security permissions need not be specified and the test/run program need not necessarily be run locally.

Abstract: An apparatus and method for managing keystores is implemented. A distributed keystore is established by aggregating individual. The distributed keystore may, be organized in a multi-level structure, which may be associated with an organizational structure of an enterprise, or other predetermined partitioning. Additionally, a centralized management of certificates may be provided, whereby the expiration or revocation of the certificates may be tracked, and expired or revoked certificates may be refreshed. The keystore may be updated in response to one or more update events.