Authentication referral search for LDAP
First Claim
1. A method for authenticating referral searches that are generated responsive to a client receiving referrals from at least one directory server, comprising:
- receiving a bind request from a referred search request;
searching a local directory of a server for an entry corresponding to the distinguished name (DN) of the bind request;
authenticating the bind request if an entry for the bind DN is located within the local directory of the server;
checking a defined reference server for the prefix of the bind DN, if the bind DN is not found within the local directory of the server;
contacting the reference server for authentication, if the prefix of the bind DN is located on the reference server, wherein the reference server is contacted by the server; and
denying the bind request if both the local directory and the reference server do not contain an entry corresponding to the bind DN.
5 Assignments
0 Petitions
Accused Products
Abstract
A method, program and system for authenticating LDAP referral searches are provided. The invention comprises receiving a bind request from a LDAP referred search request and then searching the local directory for an entry corresponding to the distinguished name (DN) of the bind request. If an entry for the bind DN is located within the local directory, the bind request is authenticated. If an entry for the bind DN is not found in the local directory, a defined reference server is checked for the prefix of the bind DN. If the prefix for the bind DN is located in the reference server, the reference server is contacted for authentication, which is performed using a root DN. If an entry for the bind DN is not found in either the local directory or reference server, the bind request cannot be authenticated and is denied.
23 Citations
6 Claims
-
1. A method for authenticating referral searches that are generated responsive to a client receiving referrals from at least one directory server, comprising:
-
receiving a bind request from a referred search request; searching a local directory of a server for an entry corresponding to the distinguished name (DN) of the bind request; authenticating the bind request if an entry for the bind DN is located within the local directory of the server; checking a defined reference server for the prefix of the bind DN, if the bind DN is not found within the local directory of the server; contacting the reference server for authentication, if the prefix of the bind DN is located on the reference server, wherein the reference server is contacted by the server; and denying the bind request if both the local directory and the reference server do not contain an entry corresponding to the bind DN. - View Dependent Claims (2)
-
-
3. A computer program product in a computer readable medium for use in a data processing system, for authenticating referral searches that are generated responsive to a client receiving referrals from at least one directory server, the computer program product comprising:
-
instructions for receiving a bind request from a referred search request; instructions for searching a local directory of a server for an entry corresponding to the distinguished name (DN) of the bind request; instructions for authenticating the bind request if an entry for the bind DN is located within the local directory of the server; instructions for checking a defined reference server for the prefix of the bind DN, if the bind DN is not found within the local directory of the server; instructions for contacting the reference server for authentication, if the prefix of the bind DN is located on the reference server, wherein the reference server is contacted by the server; and instructions for denying the bind request if both the local directory and the reference server do not contain an entry corresponding to the bind DN. - View Dependent Claims (4)
-
-
5. A system for authenticating referral searches that are generated responsive to a client receiving referrals from at least one directory server, comprising:
-
means for receiving a bind request from a referred search request; means for searching a local directory of a server for an entry corresponding to the distinguished name (DN) of the bind request; means for authenticating the bind request if an entry for the bind DN is located within the local directory of the server; means for checking a defined reference server for the prefix of the bind DN, if the bind DN is not found within the local directory of the server; means for contacting the reference server for authentication, if the prefix of the bind DN is located on the reference server, wherein the reference server is contacted by the server; and means for denying the bind request if both the local directory and the reference server do not contain an entry corresponding to the bind DN. - View Dependent Claims (6)
-
Specification