Abstract: A method, apparatus, and computer implemented instructions for restricting a fan-out type search of a distributed database. A search request is received indicating that a requesting node originating the search request desires to avoid receiving search results including inaccessible nodes. Responsive to receiving the search results from other nodes, the search results are filtered to remove search results from inaccessible nodes to form filtered search results. The filtered search results are passed to the requesting node.

Abstract: A method, system, apparatus, and computer program product is presented for management of a distributed data processing system on behalf of a plurality of management customers. Endpoint objects, system objects, and network objects are logically organized into a set of scopes that do not logically overlap. An administrative user may dynamically reconfigure logical networks within the distributed data processing system while managing the logical networks for a set of customers. The network management system is able to provide security while allowing for dynamic changes in location of devices. A geographic location identifier is automatically generated for an endpoint based on the endpoint's MAC address and its relation to a router within its network, thereby uniquely identifying the endpoint using the endpoint's hardware MAC address in conjunction with its geographic location. Security-related commands are implemented such that actions can be authorized with respect to geographic locations.

Abstract: A method, system, apparatus, and computer program product is presented for management of a distributed data processing system on behalf of a plurality of management customers. Endpoint objects, system objects, and network objects are logically organized into a set of scopes that do not logically overlap. An administrative user may dynamically reconfigure logical networks within the distributed data processing system while managing the logical networks for a set of customers. The network management system is able to provide security at logical boundaries between networks. Geographic location identifiers are associated with network resources. Network-related actions can be performed on resources with common geographic boundaries. The network management framework assists administrators in opening or closing access to resources/devices at the boundaries such that portions of a highly distributed data processing system could be quarantined from other portions of the distributed data processing system.