Proxy Support For Special Subtree Entries In A Directory Information Tree Using Attribute Rules

• US 20110082879A1
• Filed: 10/07/2009
• Published: 04/07/2011
• Est. Priority Date: 10/07/2009
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: McConaughy, John Mark, Williams, Gary Dale, Hazlewood, Kristin Marie
• Granted Patent: US 8,423,581 B2
• Time in Patent Office: Days
• US Class Current: 707/770
• CPC Class Codes: G06F 16/9027 Trees
• CPC Class Codes: H04L 67/563 Data redirection of data network streams

Abstract

A mechanism for providing proxy support for special subtree entries in a directory information tree by defining filters at the proxy level to indicate relationships between main subtree entries and associated special subtree entries. A proxy server receives a request from a client for a special subtree entry and determines whether the distinguished name of the main subtree entry can be built using information in the request and pre-defined relationships between the main subtree entry and the requested subtree entry. If so, the proxy server builds the distinguished name of the main subtree entry associated with the special subtree entry and applies a partitioning filter to the distinguished name of the main subtree entry to determine a target directory server in the plurality of backend directory servers that comprise the special subtree. The proxy server then sends the request to the target directory server.

Claims

1. A computer implemented method of locating special subtree entries in a distributed directory environment using a proxy server, the computer implemented method comprising:

receiving, at the proxy server, a request from a client for a special subtree entry, wherein the special subtree entry is stored in a special subtree in one of a plurality of backend directory servers in the distributed directory environment;

retrieving a partitioning filter associated with the requested special subtree entry;

determining whether the request comprises a distinguished name control, wherein the control specifies the distinguished name of a main subtree entry associated with the special subtree entry;

responsive to a determination that the request does not comprise a distinguished name control, building the distinguished name of the main subtree entry associated with the special subtree entry;

applying the partitioning filter to the distinguished name of the main subtree entry to determine a target directory server in the plurality of backend directory servers that comprise the special subtree; and

sending the request to the target directory server.

2. The computer implemented method of claim 1, further comprising:

determining at least one of a new distinguished name for the special subtree entry or a new search filter for the request;

updating the request with the at least one new distinguished name or new search filter to form a directed search, wherein the directed search retrieves the special subtree entry from the target directory server; and

sending the directed search to the target directory server.

3. The computer implemented method of claim 1, further comprising:

responsive to a determination that the request comprises a distinguished name control, obtaining the distinguished name of the main subtree entry from the distinguished name control;

applying the partitioning filter to the distinguished name of the main subtree entry to determine a target directory server in the plurality of backend directory servers that comprises the special subtree; and

sending the request to the target directory server.

4. The computer implemented method of claim 1, wherein building the distinguished name of the main subtree entry associated with the special subtree entry comprises:

determining whether the distinguished name of the main subtree entry can be built using information in the request and pre-defined relationships between the main subtree entry and the requested subtree entry; and

building the distinguished name of the main subtree entry associated with the special subtree entry in response to a determination that the distinguished name of the main subtree entry can be built.

5. The computer implemented method of claim 4, further comprising:

sending the request to all directory servers in the plurality of backend directory servers in response to a determination that the distinguished name of the main subtree entry cannot be built.

6. The computer implemented method of claim 5, further comprising:

determining whether multiple identical entries with the distinguished name of the special subtree entry exist in the plurality of backend directory servers; and

responsive to a determination that multiple identical entries exist, rejecting the request.

7. The computer implemented method of claim 6, further comprising:

responsive to a determination that multiple copies do not exist, identifying a directory server that contains the special subtree entry as the target directory server; and

sending the request to the target directory server.

8. The computer implemented method of claim 1, wherein applying a partitioning filter to the original distinguished name further comprises:

applying a hash function to relative distinguished names at a level of the distinguished name of the main subtree entry; and

obtaining a result of the hash function, wherein the result indicates the target directory server that comprises the requested special subtree entry.

9. The computer implemented method of claim 1, wherein the pre-defined relationships between the main subtree entry and the requested subtree entry comprise relationships between the distinguished name of the main subtree entry and the distinguished name of the special subtree entry or between the distinguished name of the main subtree entry and an attribute of the special subtree entry.

10. The computer implemented method of claim 1, wherein the special subtree entry is one of a changelog subtree entry or tombstone subtree entry.

11. An apparatus comprising:

a bus;

a storage device connected to the bus, wherein the storage device contains computer usable code;

at least one managed device connected to the bus;

a communications unit connected to the bus; and

a processing unit connected to the bus, wherein the processing unit executes the computer usable code to receive, at the proxy server, a request from a client for a special subtree entry, wherein the special subtree entry is stored in a special subtree in one of a plurality of backend directory servers in the distributed directory environment;

retrieve a partitioning filter associated with the requested special subtree entry;

determine whether the request comprises a distinguished name control, wherein the control specifies the distinguished name of a main subtree entry associated with the special subtree entry;

build, in response to a determination that the request does not comprise a distinguished name control, the distinguished name of the main subtree entry associated with the special subtree entry;

apply the partitioning filter to the distinguished name of the main subtree entry to determine a target directory server in the plurality of backend directory servers that comprise the special subtree; and

send the request to the target directory server.

12. A computer program product in a computer usable medium having computer usable program code stored thereon, the computer usable program code for execution by a computer, comprising:

computer usable program code for receiving, at the proxy server, a request from a client for a special subtree entry, wherein the special subtree entry is stored in a special subtree in one of a plurality of backend directory servers in the distributed directory environment;

computer usable program code for retrieving a partitioning filter associated with the requested special subtree entry;

computer usable program code for determining whether the request comprises a distinguished name control, wherein the control specifies the distinguished name of a main subtree entry associated with the special subtree entry;

computer usable program code for building, in response to a determination that the request does not comprise a distinguished name control, the distinguished name of the main subtree entry associated with the special subtree entry;

computer usable program code for applying the partitioning filter to the distinguished name of the main subtree entry to determine a target directory server in the plurality of backend directory servers that comprise the special subtree; and

computer usable program code for sending the request to the target directory server.

13. The computer program product of claim 12, further comprising:

computer usable program code for determining at least one of a new distinguished name for the special subtree entry or a new search filter for the request;

computer usable program code for updating the request with the at least one new distinguished name or new search filter to form a directed search, wherein the directed search retrieves the special subtree entry from the target directory server; and

computer usable program code for sending the directed search to the target directory server.

14. The computer program product of claim 12, further comprising:

computer usable program code for obtaining, in response to a determination that the request comprises a distinguished name control, the distinguished name of the main subtree entry from the distinguished name control;

computer usable program code for applying the partitioning filter to the distinguished name of the main subtree entry to determine a target directory server in the plurality of backend directory servers that comprises the special subtree; and

computer usable program code for sending the request to the target directory server.

15. The computer program product of claim 12, further comprising:

computer usable program code for determining whether the distinguished name of the main subtree entry can be built using information in the request and pre-defined relationships between the main subtree entry and the requested subtree entry; and

computer usable program code for building the distinguished name of the main subtree entry associated with the special subtree entry in response to a determination that the distinguished name of the main subtree entry can be built.

16. The computer program product of claim 15, further comprising:

computer usable program code for sending the request to all directory servers in the plurality of backend directory servers in response to a determination that the distinguished name of the main subtree entry cannot be built.

17. The computer program product of claim 16, further comprising:

computer usable program code for determining whether multiple identical entries with the distinguished name of the special subtree entry exist in the plurality of backend directory servers; and

computer usable program code for rejecting the request in response to a determination that multiple identical entries exist.

18. The computer program product of claim 12, wherein the computer usable program code for applying a partitioning filter to the original distinguished name further comprises:

computer usable program code for applying a hash function to relative distinguished names at a level of the distinguished name of the main subtree entry; and

computer usable program code for obtaining a result of the hash function, wherein the result indicates the target directory server that comprises the requested special subtree entry.

19. The computer program product of claim 12, wherein the computer usable program code is stored in a computer readable storage medium in a data processing system, and wherein the computer usable program code is downloaded over a network from a remote data processing system.

20. The computer program product of claim 12, wherein the computer usable program code is stored in a computer readable storage medium in a server data processing system, and wherein the computer usable program code is downloaded over a network from a remote data processing system for use in a computer readable storage medium with the remote system.