Through associating each data partition within a replicated storage domain
of networked storage devices with one of multiple secret keys shared with
a file manager, a credential is issued from the file manager to a client
requesting access to a partition. The credential includes a network
address for the partition to which the client is to direct its actions.
The storage device periodically confirms with the file manager the
validity of the shared secret keys. Through logical process and
evaluations applied to issuing the credential and determining the address
of the partition to be included in each credential, the file manager may
invalidate partitions individually, provide load balancing between access
of original and replica partitions, and provide security functions such
as isolation of partitions for access by and tracking of unauthorized
users, or for testing purposes.