Managing access to objects of a computing environment

Abstract

Access to objects of a computing environment is managed. Access to an object of the computing environment is prohibited via one cached entity corresponding to the object, while access to the object is allowed via another cached entity. The cached entities are concurrently maintained for a period of time, but the one cached entity is in a shadow state. In one example, the cached entities are session locks and the object is a file system object.

Description

FIELD OF THE INVENTION

This invention relates, in general, to processing within a computing environment, and in particular, to managing access to objects of the computing environment.

BACKGROUND OF THE INVENTION

Access to various objects, such as files, directories, etc., of a computing environment is controlled in order to provide security and to preserve data integrity. In many computing environments, locking protocols are used in the controlling. For instance, in distributed file systems, access to file system objects is controlled via a plurality of locks. As examples, some locks are used to coordinate the caching of file system content, while other locks are used to coordinate access to file system objects by different clients.

To enhance system performance, one or more of the locks are cached in one or more client caches. Thus, it is important to ensure that the cached locks are valid at the time of use. Although caching protocols exist, a need still exists for a capability that further manages cached locks, or other cached entities. Further, a need exists for a capability that manages access to objects of a computing environment.

SUMMARY OF THE INVENTION

The shortcomings of the prior art are overcome and additional advantages are provided through the provision of a system of managing access to objects of a file system. The system includes, for instance, a server of the file system to facilitate providing of an inconsistent state of a lock corresponding to an object of the file system; a client of the file system to invalidate one or more existing open instances of the object, in response to the inconsistent state, wherein existing references to the lock receive an error; the client to request another open of the object, the another open to provide another open instance of the object; the client to obtain, in response to the requesting, a new lock corresponding to the object; and the client to access the object using the new lock, wherein the inconsistent lock and the new lock are concurrently maintained in the cache, until the existing references are dropped, and wherein at least one invalidated existing open instance and the another open instance are concurrently in an open state until the invalidated existing open instances are closed.

Method and computer program products corresponding to the above-summarized system are also described and may be claimed herein.

Additional features and advantages are realized through the techniques of the present invention. Other embodiments and aspects of the invention are described in detail herein and are considered a part of the claimed invention.

BRIEF DESCRIPTION OF THE DRAWINGS

The subject matter which is regarded as the invention is particularly pointed out and distinctly claimed in the claims at the conclusion of the specification. The foregoing and other objects, features, and advantages of the invention are apparent from the following detailed description taken in conjunction with the accompanying drawings in which:

FIG. 1 a depicts one embodiment of a computing environment to incorporate and use one or more aspects of the present invention;

FIG. 1 b depicts a file system to incorporate and use one or more aspects of the present invention;

FIGS. 2 a-2b depict examples of a client cache of FIG. 1b, in accordance with an aspect of the present invention;

FIG. 3 depicts one embodiment of the logic associated with opening a file system object, in accordance with an aspect of the present invention;

FIG. 4 illustrates multiple applications having a same handle used to access the file system object corresponding to that handle, in accordance with an aspect of the present invention;

FIG. 5 depicts one embodiment of the logic associated with checking the validity of a cached entity, in accordance with an aspect of the present invention;

FIG. 6 depicts one embodiment of the logic associated with converting a cached entity to a shadow entity, in accordance with an aspect of the present invention;

FIG. 7 illustrates one example of applications using an old entity handle and receiving an error, while another application using a new entity handle processes successfully, in accordance with an aspect of the present invention;

FIG. 8 depicts one embodiment of logic associated with closing a cached entity, in accordance with an aspect of the present invention; and

FIGS. 9 a-9b depict one embodiment of the logic associated with a particular example in which one or more aspects of the present invention are employed.

DETAILED DESCRIPTION OF THE INVENTION

Overview

In accordance with an aspect of the present invention, a capability is provided for managing access to objects of a computing environment. Access to an object is prohibited via one cached entity corresponding to the object, while access to the object is allowed via another cached entity. The one cached entity and the another cached entity are concurrently maintained for at least some time. In one example, the cached entities represent locks that control access to the object. For instance, in a file system, one or more existing opens of a file system object are invalidated, in response to a cached entity (e.g., a lock) associated with the file system object becoming inconsistent. However, while at least one invalidated existing open is maintained in an invalid, but open state, one or more new opens of the file system object are permitted to proceed by employing another cached entity representative of the object.

Detailed Description

One embodiment of a computing environment to incorporate and use one or more aspects of the present invention is described with reference to FIG. 1a. A computing environment 100 includes, for instance, a computing unit 102 coupled to another computing unit 104 via a connection 106. A computing unit includes, for instance, a personal computer, a laptop, a workstation, a mainframe, a mini-computer, or any other type of computing unit. Computing unit 102 may or may not be the same type of unit as computing unit 104. The connection coupling the units is a wire connection or any type of network connection, such as a local area network (LAN), a wide area network (WAN), a token ring, an Ethernet connection, an internet connection, etc.

In one example, each computing unit executes an operating system 108, such as, for instance, the z/OS operating system, offered by International Business Machines Corporation, Armonk, N.Y.; a UNIX operating system; Linux; Windows; or other operating systems, etc. The operating system of one computing unit may be the same or different from another computing unit. Further, in other examples, one or more of the computing units may not include an operating system.

In one embodiment, computing unit 102 includes a client application (a.k.a., a client) 110 which is coupled to a server application (a.k.a., a server) 112 on computing unit 104. Client 110 communicates with server 112 via, for instance, a Network File System (NFS) protocol over a TCP/IP link coupling the applications. Further, on at least one computing unit, one or more user applications 114 are executing.

In one particular embodiment, the environment includes a file system (FIG. 1b), such as a distributed file system, in which a storage area network 116 is employed to facilitate access by one or more clients 110 and one or more servers 112 to one or more storage devices 118 over a high speed link. The use of a storage area network enables the provision of high performance distributed file systems, which allow clients to obtain data directly from storage devices rather than accessing data through a server that performs reads and writes on their behalf. However, the client accesses are coordinated via one or more servers.

In a distributed file system, applications running on client computing units including, for instance, user applications, client applications, etc., access a file system namespace, which is, for instance, distributed across one or more computing units. The namespace includes one or more file system objects accessible by the applications. In one example, the name space is organized as a tree structure and includes various types of objects, such as, for instance, files, which include data accessible to clients; directories used to organize other objects; and symbolic links, which are points in the tree where the name lookup of an object is redirected.

Associated with the file system objects are entities used, for instance, to facilitate access to the file system objects. These entities are cached in a client resident cache 120 for faster access. In one embodiment, one or more applications (e.g., user applications, client applications) have access to the cached entities.

A cached entity has a plurality of attributes associated therewith, including, for instance, a reference count indicating how many applications have a handle to the entity; and a validity indicator specifying whether the cached entity is valid. The cached entities are coupled to one another in a data structure, such as a linked list 200 (FIG. 2a), as one example.

Access to file system objects is controlled to maintain security and data integrity. One embodiment of the logic associated with managing access to file system objects is described below.

Referring initially to FIG. 3, an application requests an open of a file system object (such as a file), STEP 300. In one example, the application is executing on a client computing unit, and the open includes performing a search in the client's cache for an entity associated with the requested file system object, STEP 302. The entity is used in facilitating access to the file system object, and for purposes of illustration, is referred to herein as Entity X. If the associated entity is not in the cache, INQUIRY 304, an instance of the entity is created and added to the cache, STEP 306. This includes, for instance, appending Entity X to the linked list of cached entities, as shown at 202 (FIG. 2b). Returning to FIG. 3, thereafter, the reference count of the cached entity is incremented, STEP 308, and a handle for the entity is computed, STEP 310. In one example, this includes determining the address of the cached entity, which is returned as a handle (e.g., Handle Hx), STEP 312.

Referring back to INQUIRY 304, should the cache search be successful, then the reference count of the cached entity is incremented, STEP 308, and processing continues with computing the entity handle, STEP 310. This concludes the open processing.

One or more applications executing on the client computing unit may request an open of the same file system object. In such a case, each of the applications may obtain the same handle from the client, as shown in FIG. 4. As depicted, Applications 1-4 each receive and use handle Hx for processing.

During application processing, operations, such as a read or a write operation, are requested against the open file system object. As part of this processing, a check is made as to the validity of the cached entity, which is used in facilitating access to the file system object. One embodiment of the logic associated with this check is described with reference to FIG. 5. The cached entity to be checked for validity is the entity corresponding to the object handle returned in the open, STEP 500. In one example, this checking includes checking the validity indicator of the cached entity. If the entity is in an invalid state, INQUIRY 502, then an error is returned, STEP 504. Otherwise, an indication of success is returned, STEP 506.

At some point, the cached entity may become inconsistent. Should it become inconsistent, then it is converted to a shadow entity, as described with reference to FIG. 6. In response to the cached entity becoming inconsistent, STEP 600, a search is made in the cache for the cached entity, e.g., Entity X, STEP 602. The cached entity is deleted from the linked list of entities, STEP 604. However, the entity remains in the cache as a shadow entity (i.e., a stand-alone entity), STEP 606. For example, the entity is moved to another portion of the cache and marked as a shadow entity. One example of this is shown in FIG. 7, in which a cache 700 has a shadow entity 702. Thereafter, the cache statistics are updated, STEP 608 (FIG. 6). For instance, an entity count for the cache is decremented.

In accordance with an aspect of the present invention, any old opens still refer to the entity using the handle they received in the open, but any new opens will cause a cache miss, since the entity is no longer in the main entity hash table list (e.g., linked list). Therefore, the entity will be brought into the cache and have a new handle. Thus, as shown in the example of FIG. 7, Applications 1-4 still use handle Hx, which causes an error to be returned (704), but Application 5 receives a new handle NHx, which allows a successful access (706). The opens associated with applications 1-4 are therefore invalidated, while the open associated with Application 5 is permitted. The invalidated opens and the permitted open concurrently remain in an open state for a period of time (e.g., until the inconsistent cache entity is closed). After Applications 1-4 close the entity, the entity goes away, and the applications are no longer in an open state with that entity.

One embodiment of the logic associated with closing a cached entity is described with reference to FIG. 8. The close is performed on the entity having the handle returned in the open, STEP 800. The reference count of the cached entity is decremented, STEP 802. If the reference count is not zero, INQUIRY 804, then close processing is complete. However, if the reference count is zero, then a determination is made as to whether it is a shadow entity, INQUIRY 806. If so, then the entity is deallocated, STEP 808. Otherwise, the entity is deleted from the cache, STEP 810. This concludes the close processing.

Described above is a capability in which new opens of an object are permitted, while actions on the old opens are prohibited. One particular example in which this capability is employed is with a locking mechanism for distributed file systems. For instance, a file system uses a distributed lock, referred to herein as a session lock, to control access to file system objects between different clients of the file system. In one example, each client has one session lock per file system object, but the lock may be serving more than one application associated with that client. For instance, Client 1 obtains a session lock, Entity X, for a file system object, File “Foo”. One or more applications of the client use that lock (typically, implicitly, but can be explicitly, in other embodiments) in accessing the file (e.g., read, write, create, find). This is further described below with reference to FIGS. 9a-9b.

When an application requests an open of a file system object, STEP 900, an open request is sent from the application to the client (e.g., to a Client State Manager (CSM), which is platform independent, via an Installable File System (IFS), which his platform dependent), STEP 902. The client checks its cache for a session lock on the file system object, STEP 904. If there is a cache hit, INQUIRY 906, success is returned to the client, STEP 908. If not, the client sends a request to the server and the server processes the request, STEP 910. If the grant is unsuccessful, INQUIRY 912, then an error is returned, STEP 914. Otherwise, a successful response from the server grants a session lock on the file system object to the requested client, STEP 916. The client caches the session lock, STEP 917, and thus, on subsequent opens, the client returns success locally. So, different applications associated with one client operating on the same file system object may have different file descriptors, but one session lock.

The client provides a handle (e.g., address) of the cached session lock to the application requesting the open, STEP 918. This handle is then used in further processing.

For example, in response to a successful open, one or more operations (e.g., read, write, find, or other operations) are initiated against the open file system object, STEP 920 (FIG. 9b). For each operation, a check is made as to the validity of the session lock, INQUIRY 922. In one example, a session lock may become invalid when a lease associated with that lock expires. For instance, a lease is a contract between a client and a server, in which the server guarantees correctness of the data in the client's cache for a specified period of time designated in the lease. The lease can be renewed before it expires. However, if a lease is not renewed (e.g., because of a disconnect, server crash, or for any other reason), then at the end of the lease period, the locks obtained during the lease are invalidated. Thus, the client cannot operate on the cached data, when it does not have a valid lock. Therefore, to proceed with the operations, the client reidentifies itself with the server to enter a new lease, and attempts to reassert the invalid locks, STEP 924. If successful, then the invalid state of the lock is changed to valid by the client and the operation proceeds, STEP 928. Similarly, if the session lock is valid, INQUIRY 922, processing continues.

However, if the reassertion is unsuccessful, INQUIRY 926, then the session lock is in an inconsistent state, STEP 930. Thus, various actions are performed, STEP 932. For instance, any open instances of the file system object are invalidated. To invalidate the open instances, the cached session lock is made a shadow entity, by the client, by marking it as a shadow entity, removing it from the cache list and leaving it in the cache as a stand-alone entity. Since the lock is removed from the cache list, existing references to the session lock will get an error (e.g., due to its shadow state), thereby invalidating the opens associated with those references. The lock is maintained as a stand-alone entity in the cache until the existing references to the object are dropped. Then, the entity is closed. However, new accesses (e.g., opens) to the file corresponding to the shadow entity creates a new cached entity (e.g., a new session lock), permitting new accesses to proceed normally. That is, from the perspective of the client, it is like accessing the lock for the first time. So, the client sends a session lock request to the server and is returned a new session lock. New references to the session lock work properly, but references to the old lock obtain errors.

Advantages

Described in detail above is a capability for managing access to file system objects. While one or more existing opens of a file system object may be invalidated, one or more new opens are permitted. In one example, this is accomplished via cached entities, and in particular, shadow entities. The use of shadow entities advantageously provides the desired management benefits with minimal changes in the existing design and/or code. Further, it improves system performance by allowing file system objects to be accessed, even though one or more old opens are not yet closed. Yet further, by maintaining the cached entities in this manner, it is not necessary to have one session lock instance per each open, which would make the client cache unnecessarily large and difficult to maintain.

Alternate Embodiments

Although preferred embodiments have been depicted and described in detail herein, it will be apparent to those skilled in the relevant art that various modifications, additions, substitutions and the like can be made without departing from the spirit of the invention, and these are, therefore, considered to be within the scope of the invention, as defined in the following claims.

For example, although in one embodiment described above, one client is coupled to one server, in other embodiments, one or more clients may be coupled to one or more servers or any combination thereof. The one or more clients may be on one or more computing units. Similarly, the one or more servers may be on one or more computing units. Further, the one or more clients and one or more servers may be on one computing unit.

Additionally, although examples of computing environments have been provided, these are only examples. Other environments may be used. For instance, although an example is described herein with reference to a file system, this is only one example. One or more aspects of the present invention are applicable to other environments. Yet further, although an example is described herein with reference to a session lock, other types of locks or other types of resources may be represented. The cached entities may be for other than locking and can be used for other reasons. As one example, the cached entities may be instances of an object, itself.

Moreover, although in the embodiments described above, a cache entity becomes inconsistent, in response to an expired lease, there may be various other reasons why a cached entity becomes inconsistent. These are all considered a part of the claimed invention. Further, the cached list of entities can be in a data structure other than a linked list.

Yet further, the application requesting access to the file system object can be a variety of applications, including but not limited to, user applications, client applications, or any other type of applications.

The flow diagrams depicted herein are just examples. There may be many variations to these diagrams or the steps (or operations) described therein without departing from the spirit of the invention. For instance, the steps may be performed in a differing order, or steps may be added, deleted or modified. All of these variations are considered a part of the claimed invention.

The present invention can be included in an article of manufacture (e.g., one or more computer program products) having, for instance, computer usable media. The media has therein, for instance, computer readable program code means or logic (e.g., instructions, code, commands, etc.) to provide and facilitate the capabilities of the present invention. The article of manufacture can be included as a part of a computer system or sold separately.

Additionally, at least one program storage device readable by a machine embodying at least one program of instructions executable by the machine to perform the capabilities of the present invention can be provided.

Claims

1. A computer system for managing access to objects of a file system, the computer system comprising: a memory; anda processor in communications with the memory, wherein the computer system is configured to perform a method, said method comprising: invalidating, by a client of the file system, one or more existing open instances of an object of the file system, in response to an inconsistent state of a lock corresponding to the object, wherein existing references to the lock receive an error;requesting another open of the object, said another open to provide another open instance of the object;obtaining, in response to the requesting, a new lock corresponding to the object; andaccessing the object using the new lock, wherein the inconsistent lock and the new lock are concurrently maintained in a client cache, until the existing references are dropped, and wherein at least one invalidated existing open instance and the another open instance are concurrently in an open state until the invalidated existing open instances are closed, wherein the inconsistent lock is removed from a data structure of cached entities in the client cache to provide a stand-alone cached entity in the client cache and wherein the data structure comprises a linked list.

2. The computer system of claim 1, wherein the method further comprises facilitating by a server of the file system to provide the inconsistent state of the lock, wherein the facilitating rejects a request by the client to reassert the lock, wherein the inconsistent state is in response to the rejection.

3. The computer system of claim 2, wherein the request to reassert is in response to expiration of a lease between the client and the server.

4. A computer program product for managing access to objects of a file system, the computer program product comprising: a non-transitory computer readable storage medium readable by a processor and storing instructions for execution by the processor for performing a method comprising: invalidating, by a client of the file system, one or more existing open instances of an object of the file system, in response to an inconsistent state of a lock corresponding to the object, wherein existing references to the lock receive an error;requesting another open of the object, said another open to provide another open instance of the object;obtaining, by the client, in response to the requesting, a new lock corresponding to the object; andaccessing the object using the new lock, wherein the inconsistent lock and the new lock are concurrently maintained in a client cache, until the existing references are dropped, and wherein at least one invalidated existing open instance and the another open instance are concurrently in an open state until the invalidated existing open instances are closed, wherein the inconsistent lock is removed from a data structure of cached entities in the client cache to provide a stand-alone cached entity in the client cache and wherein the data structure comprises a linked list.

5. The computer program product of claim 4, wherein the method further comprises facilitating by a server of the file system to provide the inconsistent state, wherein the facilitating comprises rejecting by the server a request by the client to reassert the lock, wherein the inconsistent state is in response to the rejection.

6. The computer program product of claim 5, wherein the request to reassert is in response to expiration of a lease between the client and the server.

7. A method of managing access to objects of a computing environment, said method comprising: prohibiting access to an object of the computing environment via a cached entity corresponding to the object, said cached entity being a representation of the object, and wherein the prohibiting access is in response to the cached entity becoming inconsistent and the prohibiting comprises converting the inconsistent cached entity to a shadow entity to prohibit the access, wherein the converting comprises removing the inconsistent cached entity from a data structure of cached entities to provide a stand-alone cached entity as the shadow entity, wherein the cached entity becomes inconsistent, in response to an expired lease associated with the cached entity; andaccessing the object via another cached entity corresponding to the object, said another cached entity being a representation of the object and including the same attributes as the cached entity, wherein said cached entity and said another cached entity are located in a cache of a node facilitating access of the object and are concurrently maintained in the cache until references to the shadow entity are closed, the shadow entity being separately maintained in the cache apart from the data structure of cached entities located in the cache, the data structure including the another cached entity, the data structure comprising a linked list, and wherein the shadow entity is not used for new open requests for the life of the shadow entity and the another cached entity is used for new open requests.

8. The method of claim 7, wherein the cached entity and the another cached entity each comprises a lock associated with the object.

9. The method of claim 7, wherein the converting further comprises marking the stand-alone cached entity as a shadow entity.

10. The method of claim 7, wherein the prohibiting comprises providing an error in response to employing a handle corresponding to the cached entity.

11. The method of claim 7, further comprising providing a valid handle for the another cached entity corresponding to the object to enable access to the object via the another cached entity.

12. The method of claim 7, further comprising: requesting by a client from a server an entity corresponding to the object;providing by the server to the client the requested entity; andcaching the requested entity in a cache of the client, wherein the requested entity in the cache is the another cached entity.

13. The method of claim 7, wherein at least one of the cached entity and the another cached entity comprises a reference count indicating how many applications have a handle to the cached entity.

14. A computer system for managing access to objects of a computing environment, said computer system comprising: a memory; anda processor in communications with the memory, wherein the computer system is configured to perform a method, said method comprising: prohibiting access to an object of the computing environment via a cached entity corresponding to the object, said cached entity being a representation of the object, and wherein the prohibiting access is in response to the cached entity becoming inconsistent and the prohibiting comprises converting the inconsistent cached entity to a shadow entity to prohibit the access, wherein the converting comprises removing the inconsistent cached entity from a data structure of cached entities to provide a stand-alone cached entity as the shadow entity, wherein the cached entity becomes inconsistent, in response to an expired lease associated with the cached entity; andaccessing the object via another cached entity corresponding to the object, said another cached entity being a representation of the object and including the same attributes as the cached entity, wherein said cached entity and said another cached entity are located in a cache of a node facilitating access of the object and are concurrently maintained until references to the shadow entity are closed, the shadow entity being separately maintained in the cache apart from the data structure of cached entities located in the cache, the data structure including the another cached entity, the data structure comprising a linked list, and wherein the shadow entity is not used for new open requests for the life of the shadow entity and the another cached entity is used for new open requests.

15. The computer system of claim 14, wherein the prohibiting comprises providing an error in response to employing a handle corresponding to the cached entity.

16. The computer system of claim 14, further comprising caching the another cached entity, in response to a cache miss.

17. The computer system of claim 14, further comprising providing a valid handle for the another cached entity corresponding to the object to enable access to the object via the another cached entity.

18. The computer system of claim 14, wherein at least one of the cached entity and the another cached entity comprises a reference count indicating how many applications have a handle to the cached entity.

19. A computer program product for managing access to objects of a computing environment, said computer program product comprising: a non-transitory computer readable storage medium readable by a processor and storing instructions for execution by the processor for performing a method comprising: prohibiting access to an object of the computing environment via a cached entity corresponding to the object, said cached entity being a representation of the object, and wherein the prohibiting access is in response to the cached entity becoming inconsistent and the prohibiting comprises converting the inconsistent cached entity to a shadow entity to prohibit the access, wherein the converting comprises removing the inconsistent cached entity from a data structure of cached entities to provide a stand-alone cached entity as the shadow entity, wherein the cached entity becomes inconsistent, in response to an expired lease associated with the cached entity; andaccessing the object via another cached entity corresponding to the object, said another cached entity being a representation of the object and including the same attributes as the cached entity, wherein said cached entity and said another cached entity are located in a cache of a node facilitating access of the object and are concurrently maintained until references to the shadow entity are closed, the shadow entity being separately maintained in the cache apart from the data structure of cached entities located in the cache, the data structure including the another cached entity, the data structure comprising a linked list, and wherein the shadow entity is not used for new open requests for the life of the shadow entity and the another cached entity is used for new open requests.

20. The computer program product of claim 19, further comprising providing a valid handle for the another cached entity corresponding to the object to enable access to the object via the another cached entity.

21. The computer program product of claim 19, wherein at least one of the cached entity and the another cached entity comprises a reference count indicating how many applications have a handle to the cached entity.