Alan G Yoder

US Patent:

7778981, Aug 17, 2010

Filed:

Feb 11, 2004

Appl. No.:

10/777418

Inventors:

Robert M. Armitano - Palo Alto CA, US
Dejan L. Mihajlovic - Sunnyvale CA, US
Mark Muhlestein - Tucson AZ, US
Timothy J. Thompson - San Jose CA, US
James T. Uren - Mountain View CA, US
Alan G. Yoder - Mountain View CA, US

Assignee:

NetApp, Inc. - Sunnyvale CA

International Classification:

G06F 7/00
G06F 15/173

US Classification:

707694, 709224

Abstract:

Certain tasks are outsourced from a filer to a remote policy engine. The policy engine implements various defined policies to control the filer's servicing of client requests. For example, the policy engine can be used to implement policies to control various storage-related operations relating to data managed by a filer, such as creation, deletion, modification, opening, closing, renaming and/or changing attributes of files or directories managed by the filer.

US Patent:

7853667, Dec 14, 2010

Filed:

Aug 5, 2005

Appl. No.:

11/197931

Inventors:

Alan G. Yoder - Sunnyvale CA, US

Assignee:

Network Appliance, Inc. - Sunnyvale CA

International Classification:

G06F 15/16
G06F 7/00
G06F 13/00

US Classification:

709217, 707604, 711161

Abstract:

In at least one embodiment of the invention, a primary storage facility is managed in an HSM system. Data is relocated from the primary storage facility to a secondary storage facility. A request is received from a client for only a portion of the relocated data. In response to the request, the requested portion of the data is obtained from the secondary storage facility and stored in the primary storage facility as a sparse file. The requested portion of the data is then provided to the client from the sparse file.

US Patent:

7913300, Mar 22, 2011

Filed:

Apr 8, 2005

Appl. No.:

11/102422

Inventors:

Joshua H. Flank - Palo Alto CA, US
Steven R. Klinkner - Fremont CA, US
Benjamin B. Swartzlander - San Jose CA, US
Timothy J. Thompson - San Jose CA, US
Alan G. Yoder - Mountain View CA, US

Assignee:

NetApp, Inc. - Sunnyvale CA

International Classification:

G06F 9/00

US Classification:

726 12, 726 2, 726 17, 726 21, 726 27, 726 28, 726 29, 726 30, 711161, 709202, 709224

Abstract:

Centralized role-based access control (RBAC) for storage servers can include operating multiple storage servers, each configured to provide a set of clients with access to stored data, and using a separate network server to provide centralized RBAC. The network server may include an API proxy to proxy requests to access individual APIs of a storage server by an application which is external to the network server and the storage server and may control access to the individual APIs of the storage servers on a per-API, per-user and per-object basis. The API proxy may filter responses to API calls based on the access privileges of the user of the application which sent the API call. In some embodiments, the network server may implement a Windows domain server, an LDAP server or the like to evaluate security credentials of administrative users on behalf of multiple storage servers.

US Patent:

20150278543, Oct 1, 2015

Filed:

Mar 25, 2014

Appl. No.:

14/225271

Inventors:

- Plano TX, US
Alan Yoder - Sunnyvale CA, US

International Classification:

G06F 21/62
G06F 17/30

Abstract:

Embodiments are provided for improving storage of file ACLs. A plurality of ACLs are assigned corresponding unique ACL IDs and are stored in an indexed list. The indices of the ACLs in the list are mapped to the ACL IDs, which have a fixed defined size. The ACL ID for a given ACL is stored in a file or directory metadata structure. The ACL ID is then used to obtain the stored ACL, to determine for a user, access permission to the file or directory. The ACLs are stored once in the file system and their ACL IDs are duplicated, instead of the ACLs, in files as needed. Duplicating the ACL IDs instead of the ACLs in the files preserves storage space. Further, duplicating the ACL IDs instead of the ACLs in the files reduces the files sizes, which further improves file system efficiencies.