LDAP to SQL database proxy system and method

• US 20070073703A1
• Filed: 09/26/2005
• Published: 03/29/2007
• Est. Priority Date: 09/26/2005
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Blackberry Limited
• Inventors: Quin, Spencer
• Granted Patent: US 8,412,750 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 16/2452 Query translation
• CPC Class Codes: G06F 16/282 Hierarchical databases, e.g. IMS, LDAP data stores or Lotus Notes
• CPC Class Codes: H04L 61/4523 using lightweight directory access protocol [LDAP]
• CPC Class Codes: H04L 61/4552 Lookup mechanisms between a plurality of directories; Synchronisation of directories, e.g. metadirectories

Abstract

An LDAP to SQL proxy to adapt a relational database as a directory service for an LDAP client is provided. The database may be defined in accordance with a database schema which is external to an LDAP server serving the LDAP client. The proxy comprises LDAP to SQL query and response mappings preferably for a reduced set of LDAP operations. The proxy may comprise a mechanism to maintain a plurality of persistent database connections to reduce query processing overhead. The proxy may further be adapted to maintain persistent connections to each of at least two alternative databases for executing queries to provide enhanced failsafe operations. A plurality of LDAP to SQL proxied databases may be configured for sharing query loads to enhance scalability and performance.

Claims

1. A method of providing directory services in accordance with an lightweight data access protocol (LDAP) to an LDAP client comprising:

providing an LDAP server for receiving and responding to directory service requests in accordance with LDAP, the LDAP server comprising an LDAP to SQL proxy module defined to map LDAP service requests to SQL queries, execute the SQL queries against a database to obtain SQL query results and map the SQL query results to LDAP responses;

wherein the database is defined in accordance with a database schema external to the LDAP server.

2. The method according to claim 1 wherein said proxy module is configured to map a reduced set of types of LDAP service requests to minimize LDAP server resource consumption.

3. The method according to claim 2 wherein the LDAP to SQL proxy module maps LDAP service requests sufficient to facilitate only information retrieval from the database.

4. The method according to claim 1 wherein the LDAP server is configured as an OpenLDAP server.

5. The method according to claim 1 wherein the LDAP to SQL proxy module is defined to maintain a pool of persistent connections to at least one database, said connections providing access to execute said SQL queries.

6. A computer readable medium comprising instructions, which, when executed by a computing device, adapt an LDAP server for providing directory services to connect a database configured for SQL operation to a client configured for LDAP operation, said instructions comprising mappings to transform LDAP service requests to SQL queries and SQL responses to LDAP responses, said database defined in accordance with a database schema which is external to the LDAP server.

7. The computer readable medium according to claim 6 wherein said mappings implementing a reduced level of directory services to minimize LDAP server resource consumption.

8. The computer readable medium according to claim 6 wherein the instructions perform table lookups to transform LDAP to SQL attributes and vice versa.

9. The computer readable medium according to claim 6 wherein the instructions maintain a pool of persistent connections to the database for executing queries.

10. The computer readable medium according to any one of claim 6 wherein the instructions maintain a pool of persistent connections to each of a cell database and a master database for executing queries to enhance failsafe operations.

11. A computer system comprising;

(a) an LDAP server for providing directory services to an LDAP client;

(b) an LDAP to SQL proxy adapting the LDAP server to connect a database accessible by SQL to the LDAP client, the proxy transforming LDAP service requests to SQL queries and SQL responses to LDAP responses; and

(c) a database accessible using SQL, said database defined in accordance with a database schema external to the LDAP server.

12. The computer system according to claim 11 wherein the proxy transforms a reduced set of types of LDAP service requests to minimize LDAP server resource consumption.

13. The computer system according to claim 11 comprising a like plurality of each of the LDAP servers, LDAP to SQL proxies and databases, one of each LDAP server, LDAP to SQL proxy and database associated to define a cell and said computer system filer comprising a master database accessible by each cell.

14. The computer system according to claim 13 further comprising a redirector server to share directory service requests among the cells.

15. The computer system according to claim 13 wherein each proxy in a particular cell is configured to execute directory service requests against the master database if the database of the particular cell is unavailable.

16. The computer system according to claim 15 wherein each proxy maintains a plurality of persistent connections to each of the database of the proxy'"'"'s cell and the master database, said connections providing access to execute said SQL queries to enhance failsafe operations.