Priority queue to determine order of service for LDAP requests

• US 20080071811A1
• Filed: 08/31/2006
• Published: 03/20/2008
• Est. Priority Date: 08/31/2006
• Status: Active Grant

• Current Assignee: Red Hat, Inc. (International Business Machines Corporation)
• Original Assignee: Red Hat, Inc. (International Business Machines Corporation)
• Inventors: Parkinson, Steven W., Kinder, Nathan G.
• Granted Patent: US 7,734,658 B2
• Time in Patent Office: Days
• US Class Current: 707/101
• CPC Class Codes: G06F 9/546 Message passing systems or structures, e.g. queues
• CPC Class Codes: H04L 61/4523 using lightweight directory access protocol [LDAP]

Abstract

Techniques for improving the performance of a Lightweight Directory Access Protocol (“LDAP”) server are described. The server computes the priority of an LDAP request and enqueues it on a priority queue according to the priority. A high-priority LDAP request is removed from the queue to prepare a corresponding LDAP response. Systems and software to implement similar techniques are also described and claimed.

Claims

1. A computerized method comprising:

computing a priority of a Lightweight Directory Access Protocol (“

LDAP”

) request;

enqueueing the LDAP request on a priority queue according to the priority; and

dequeueing a high-priority LDAP request from the priority queue to prepare a corresponding LDAP response.

2. The computerized method of claim 1 wherein the priority is based in part on a network address of an LDAP client that issued the LDAP request.

3. The computerized method of claim 1 wherein the priority is based in part on authentication information associated with an LDAP client that issued the LDAP request.

4. The computerized method of claim 1 wherein the priority is based in part on whether the LDAP request was received over a Secure Sockets Layer (“

SSL”

) connection.

5. The computerized method of claim 1, further comprising:

estimating a computational complexity of the LDAP request, wherein

the priority is based in part on the estimated computational complexity.

6. A system comprising:

Lightweight Directory Access Protocol (“

LDAP”

) protocol logic to communicate with LDAP clients;

LDAP request evaluation logic to compute a priority of an LDAP request;

priority queueing logic to order a plurality of LDAP requests according to a priority of each LDAP request; and

request execution logic to prepare an LDAP response corresponding to a high-priority LDAP request from a priority queue maintained by the priority queueing logic.

7. The system of claim 6 wherein the LDAP request evaluation logic computes the priority based in part on a network address from which the LDAP request was received.

8. The system of claim 6 wherein the LDAP request evaluation logic computes the priority based in part on authentication information associated with an LDAP client that transmitted the LDAP request.

9. The system of claim 6 wherein the LDAP request evaluation logic computes the priority based in part on whether the LDAP request was received over a Secure Sockets Layer (“

SSL”

) connection.

10. The system of claim 6 wherein the LDAP request evaluation logic computes the priority based in part on an estimation of a computational complexity of the LDAP request.

11. A computer-readable medium containing executable instructions to cause a programmable processor to perform operations comprising:

computing a priority of a Lightweight Directory Access Protocol (“

LDAP”

) request;

enqueueing the LDAP request on a priority queue according to the priority; and

dequeueing a high-priority LDAP request from the priority queue to prepare a corresponding LDAP response.

12. The computer-readable medium of claim 11, containing additional executable instructions to cause the programmable processor to perform operations comprising:

launching a first group of threads to communicate with LDAP clients; and

launching a second group of threads to execute requests on a database.

13. The computer-readable medium of claim 11 wherein the priority of the LDAP request is based in part on a network address from which the LDAP request was received.

14. The computer-readable medium of claim 11 wherein the priority of the LDAP request is based in part on authentication information associated with an LDAP client that issued the LDAP request.

15. The computer-readable medium of claim 11 wherein the priority of the LDAP request is based in part on whether the LDAP request was received over a Secure Sockets Layer (“

SSL”

) connection.

16. The computer-readable medium of claim 11, containing additional executable instructions to cause the programmable processor to perform operations comprising:

estimating a computational cost of the LDAP request, wherein

the priority of the LDAP request is based in part on the estimated computational cost.

17. A system comprising:

means for enqueueing a Lightweight Directory Access Protocol (“

LDAP”

) request on a priority queue; and

means for processing a high-priority LDAP request from the priority queue to produce a corresponding LDAP response;

wherein

a priority of the LDAP request is based on one of an address from which the LDAP request was received, authentication information received with the LDAP request, or an estimate of a computational complexity of the LDAP request.