Efficient implementation of lightweight directory access protocol (LDAP) search queries with structured query language (SQL)

• US 6,356,892 B1
• Filed: 09/24/1998
• Issued: 03/12/2002
• Est. Priority Date: 09/24/1998
• Status: Expired due to Term

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Fichtner, Larry George, Corn, Cynthia Fleming, Shi, Shaw-Ben, Mancisidor, Rodolfo Augusto
• Primary Examiner(s): Vu, Kim
• Assistant Examiner(s): Ly, Anh
• Application Number:
  US09/160,022
• Time in Patent Office: 1,265 Days
• Field of Search: 707/2, 707/4, 707/3, 707/104, 707/20, 709/217, 709/218, 709/219, 709/202
• US Class Current: 1/1
• CPC Class Codes: G06F 16/24535 of sub-queries or views
• CPC Class Codes: H04L 61/4523 using lightweight directory access protocol [LDAP]
• CPC Class Codes: Y10S 707/99933 Query processing, i.e. searching
• CPC Class Codes: Y10S 707/99934 Query formulation, input preparation, or translation
• CPC Class Codes: Y10S 707/99944 Object-oriented database structure

Abstract

A method of hierarchical LDAP searching in an LDAP directory service having a relational database management system (DBMS) as a backing store. The method begins by parsing an LDAP filter-based query for elements and logical operators of the filter query. For each filter element, the method generates an SQL subquery according to a set of translation rules. For each SQL subquery, the method then generates a set of entry identifiers for the LDAP filter query. Then, the SQL subqueries are combined into a single SQL query according to a set of combination rules chosen corresponding to the logical operators of the LDAP filter query.

Claims

1. A method for searching a relational database using hierarchical, filter-based queries, comprising the steps of:

parsing a filter-based query for elements and logical operators of the filter query;

for each filter element, generating an SQL subquery according to a set of translation rules;

for each SQL subquery, generating a set of entry ID'"'"'s for the filter query; and

combining the SQL subqueries into a single SQL query according to a set of combination rules chosen corresponding to the logical operators of the filter query.

2. The method as described in claim 1 wherein the filter-based query is a Lightweight Directory Access Protocol (LDAP) directory service query.

3. The method as described in claim 2 wherein the logical operators of the LDAP filter-based query include AND, OR and NOT.

4. The method as described in claim 3 wherein the combination rules map the OR logical operator to an SQL UNION operator.

5. The method as described in claim 3 wherein the combination rules map the AND logical operator to an SQL INTERCEPT operator.

6. The method as described in claim 3 wherein the combination rules map the NOT logical operator to an SQL NOT IN operator.

7. The method as described in claim 2 wherein the relational database is DB/2.

8. The method as described in claim 1 further including the step of accessing the relational database using the single SQL query.

9. The method as described in claim 8 further including the step of returning a response to the single SQL query.

10. The method as described in claim 1 wherein the step of combining the SQL subqueries is carried out recursively until all filter elements of the filter query have been processed into the SQL query.

11. A method for searching a relational database from a Lightweight Directory Access Protocol (LDAP) directory service generating filter-based queries, comprising the steps of:

parsing an LDAP filter-based query for elements and logical operators of the LDAP filter query;

for each LDAP filter element, generating an SQL subquery according to a set of translation rules;

for each SQL subquery, generating a set of entry ID'"'"'s for the LDAP filter query; and

combining the SQL subqueries into a single SQL query according to a set of combination rules chosen corresponding to the logical operators of the LDAP filter query.

12. The method as described in claim 11 wherein the logical operators of the LDAP filter-based query include AND, OR and NOT.

13. The method as described in claim 12 wherein the combination rules map the OR logical operator to an SQL UNION operator.

14. The method as described in claim 12 wherein the combination rules map the AND logical operator to an SQL INTERCEPT operator.

15. The method as described in claim 12 wherein the combination rules map the NOT logical operator to an SQL NOT IN operator.

16. The method as described in claim 11 wherein the step of combining the SQL subqueries is carried out recursively until all filter elements of the filter query have been processed into the SQL query.

17. A computer program product in computer-readable media for searching a relational database using hierarchical, filter-based queries, comprising:

means for parsing a filter-based query for elements and logical operators of the filter query;

means for generating an SQL subquery for each filter element according to a set of translation rules;

means for generating a set of entry ID'"'"'s for each SQL subquery; and

means for combining the SQL subqueries into a single SQL query according to a set of combination rules chosen corresponding to the logical operators of the filter query.

18. The computer program product as described in claim 17 wherein the filter-based query is a Lightweight Directory Access Protocol (LDAP) directory service query.

19. The computer program product as described in claim 18 wherein the logical operators of the LDAP filter-based query include AND, OR and NOT.

20. The computer program product as described in claim 19 wherein the combination rules map the OR logical operator to an SQL UNION operator.

21. The computer program product as described in claim 19 wherein the combination rules map the AND logical operator to an SQL INTERCEPT operator.

22. The computer program product as described in claim 19 wherein the combination rules map the NOT logical operator to an SQL NOT IN operator.

23. The computer program product as described in claim 18 wherein the relational database is DB/2.

24. A directory service, comprising:

a directory organized as a naming hierarchy having a plurality of entries each represented by a unique identifier;

a relational database management system having a backing store for storing directory data;

means for searching the directory, comprising;

means for parsing an hierarchical, filter-based query for elements and logical operators of the filter query;

means for generating a relational database subquery for each filter element according to a set of translation rules;

means for generating a set of unique identifiers for each relational database subquery; and

means for combining the relational database subqueries into a single relational database query according to a set of combination rules chosen corresponding to the logical operators of the filter query.

25. The directory service as described in claim 24 wherein the directory is compliant with the Lightweight Directory Access Protocol (LDAP).

26. The directory service as described in claim 25 wherein the relational database management system is DB/2.

27. In a directory service having a directory organized as a naming hierarchy, the hierarchy including a plurality of entries each represented by a unique identifier, the improvement comprising:

a relational database management system having a backing store for storing directory data;

means for searching the directory, comprising;

means for parsing an hierarchical, filter-based query for elements and logical operators of the filter query;

means for generating a relational database subquery for each filter element according to a set of translation rules;

means for generating a set of unique identifiers for each relational database subquery; and

means for combining the relational database subqueries into a single relational database query according to a set of combination rules chosen corresponding to the logical operators of the filter query.

28. In the directory service as described in claim 27 wherein the directory is compliant with the Lightweight Directory Access Protocol (LDAP).

29. In the directory service as described in claim 28 wherein the relational database management system is DB/2.