Managed LDAP entries

Patent metadata

Field	Value
Publication number	US-9674138-B2
Application number	US-91254110-A
Country	US
Kind code	B2
Filing date	Oct 26, 2010
Priority date	Oct 26, 2010
Publication date	Jun 6, 2017
Grant date	Jun 6, 2017

Abstract

A method and apparatus for maintaining in a Lightweight Directory Access Protocol (LDAP) repository entries that are managed by an LDAP directory server. An LDAP directory server receives a client request to add a specified entry to an LDAP repository, determines, based on a managed entry configuration, that the specified entry requires a managed entry operation, and adds the specified entry to the LDAP repository. The LDAP directory server further adds a managed entry to the LDAP repository in accordance with the managed entry operation, where the managed entry is added to the LDAP repository without receiving any client request specifying the managed entry.

First claim

What is claimed is:

1. A method comprising:
storing, at a Light Weight Directory Access Protocol (LDAP) repository, a managed entry configuration in one or more configuration information entries of the LDAP repository, the managed entry configuration comprising a definition of an entry type triggering a managed entry operation, and template information for a managed entry;
receiving, at an LDAP directory server, a client request of a client device to add a specified entry to the LDAP repository, the specified entry being a new entry specified by a user of the client device;
determining, based on the managed entry configuration, that the specified entry has the entry type that triggers the managed entry operation involving the managed entry, wherein the managed entry is an additional entry associated with the specified entry, the template information for the managed entry specifying one or more static attributes to be included in the managed entry upon the creation of the managed entry;
adding the specified entry to the LDAP repository;
creating the managed entry comprising the one or more static attributes specified in the template information for the managed entry; and
adding, by a processing device, the created managed entry to the LDAP repository separate from the specified entry, wherein the managed entry is added in accordance with the managed entry operation and using the specified attributes, wherein the managed entry is managed by the LDAP directory server without any client interaction, and without receiving any client request specifying the managed entry.

2. The method of claim 1 wherein:
the managed entry is created using an identifier of the specified entry, and at least one of the one or more static attributes or one or more mapped attributes linked to corresponding attributes of the specified entry; and
adding the created managed entry to the LDAP repository comprises:
upon a successful addition of the managed entry to the LDAP repository, adding an identifier of the managed entry to the specified entry.

3. The method of claim 1 further comprising:
receiving a client request for an operation pertaining to the managed entry, the operation comprising any one of a deletion of the managed entry, a modification of the managed entry or a renaming of the managed entry;
refraining from performing the requested operation; and
notifying the client device that the managed entry is to be manually unlinked prior to performing the requested operation.

4. The method of claim 1 wherein the managed entry is of a different type than the specified entry.

5. A method comprising:
storing, at a Light Weight Directory Access Protocol (LDAP) repository, a managed entry configuration in one or more configuration information entries of the LDAP repository, the managed entry configuration comprising a definition of an entry type triggering a managed entry operation, and template information for a managed entry;
receiving a client request of a client device for an operation pertaining to a specified entry from the LDAP repository, the specified entry being an existing entry specified by a user of the client device;
determining, based on the managed entry configuration, that the specified entry has the entry type that triggers the managed entry operation involving the managed entry, wherein the managed entry is an additional existing entry associated with the specified entry, the template information for the managed entry specifying one or more static attributes to be included in the managed entry;
performing the requested operation for the specified entry from the LDAP repository; and
performing the managed entry operation for the corresponding managed entry from the LDAP repository, wherein the corresponding managed entry was created and added to the LDAP repository separately from the specified entry, the managed entry operation is performed for the corresponding managed entry using the one or more static attributes, wherein the managed entry is managed by the LDAP directory server without any client interaction, and wherein the managed entry operation is performed without receiving any client request specifying the managed entry.

6. The method of claim 5 wherein:
the operation pertaining to the specified entry is a deletion of the specified entry; and
the managed entry operation is a deletion of the corresponding managed entry.

7. The method of claim 5 wherein:
the operation pertaining to the specified entry is a modification of the specified entry; and
the managed entry operation is a modification of attributes of the corresponding managed entry that are mapped to modified attributes of the specified entry.

8. The method of claim 5 wherein:
the operation pertaining to the specified entry is a renaming of the specified entry; and
performing the managed entry operation comprises:
determining whether the renaming affects a scope of the managed entry configuration; and
if the renaming does not affect the scope of the managed entry configuration, renaming the corresponding managed entry.

9. The method of claim 8 further comprising:
determining that the renaming is moving the specified entry outside of the scope of the managed entry configuration;
deleting the corresponding managed entry from the LDAP repository; and
updating the specified entry to unlink the corresponding managed entry from the specified entry.

10. The method of claim 8 further comprising:
determining that the renaming is moving the specified entry into the scope of the managed entry configuration;
adding the corresponding managed entry to the LDAP repository; and
updating the specified entry to link the corresponding managed entry to the specified entry.

11. A system for a Light Weight Directory Access Protocol (LDAP) directory server, the system comprising:
a memory comprising an LDAP repository to store a managed entry configuration in one or more configuration information entries of the LDAP repository, the managed entry configuration comprising a definition of an entry type triggering a managed entry operation, and template information for a managed entry;
a processor, coupled to the memory; and
a managed entry subsystem, executed from the memory by the processor, to:
receive a client request of a client device to add a specified entry to the LDAP repository, the specified entry being a new entry specified by a user of the client device;
determine, based on the managed entry configuration, that the specified entry has the entry type that triggers the managed entry operation involving the managed entry, wherein the managed entry is an additional entry associated with the specified entry, the template information for the managed entry specifying one or more static attributes to be included in the managed entry upon the creation of the managed entry;
add the specified entry to the LDAP repository;
create the managed entry comprising the one or more static attributes specified in the template information for the managed entry; and
add the created managed entry to the LDAP repository separate from the specified entry, wherein the managed entry is added in accordance with the managed entry operation and using the specified attributes, wherein the managed entry is managed by the LDAP directory server without any client interaction, and without receiving any client request specifying the managed entry.

12. The system of claim 11 wherein:
the managed entry subsystem is to create the managed entry using an identifier of the specified entry, and at least one of the one or more static attributes or one or more mapped attributes linked to corresponding attributes of t

Assignees

• Kinder Nathan G
• Sorce Simo S
• Red Hat Inc

Inventors

• Kinder Nathan G
• Sorce Simo S

Classifications

• H04L61/1523 Primary

  Electricity · mapped topic

• H04L61/4523 Primary

  using lightweight directory access protocol [LDAP] · CPC title