Techniques for directory server integration

• US 8,209,491 B2
• Filed: 04/27/2010
• Issued: 06/26/2012
• Est. Priority Date: 04/27/2010
• Status: Active Grant

• Current Assignee: CA, Inc. (d/b/a CA Technologies) (Broadcom, Inc.)
• Original Assignee: Symantec Corporation (NortonLifeLock Inc.)
• Inventors: Mobarak, Ayman, Moser, Nathan, Jamart, Chad
• Primary Examiner(s): Dudek, Jr., Edward
• Assistant Examiner(s): Chrzanowski, Matthew
• Application Number:
  US12/768,364
• Publication Number:
  US 20110264865A1
• Time in Patent Office: 791 Days
• Field of Search: None
• US Class Current: 711/141
• CPC Class Codes: G06F 12/121 using replacement algorithms
• CPC Class Codes: G06F 16/2246 Trees, e.g. B+trees

Abstract

Techniques for directory server integration are disclosed. In one particular exemplary embodiment, the techniques may be realized as a method for directory server integration comprising setting one or more parameters determining a range of permissible expiration times for a plurality of cached directory entries, creating, in electronic storage, a cached directory entry from a directory server, assigning a creation time to the cached directory entry, and assigning at least one random value to the cached directory entry, the random value determining an expiration time for the cached directory entry within the range of permissible expiration times, wherein randomizing the expiration time for the cached directory entry among the range of permissible expiration times for a plurality of cached directory entries reduces an amount of synchronization required between cache memory and the directory server at a point in time.

Claims

1. A method for directory server integration comprising:

setting one or more parameters determining a range of permissible expiration times for a plurality of cached directory entries;

creating, in electronic storage, a cached directory entry from a directory server;

assigning a creation time to the cached directory entry; and

assigning at least one random value to the cached directory entry, the random value determining an expiration time for the cached directory entry within the range of permissible expiration times, wherein randomizing the expiration time for the cached directory entry among the range of permissible expiration times for a plurality of cached directory entries reduces an amount of synchronization required between cache memory and the directory server at a point in time.

2. The method of claim 1/wherein the one or more parameters determining a range of permissible expiration times for a cached directory entry comprise a maximum Time To Live parameter and a minimum Time To Live parameter.

3. The method of claim 1, wherein the one or more parameters determining a range of permissible expiration times for a cached directory entry comprise a Time To Live parameter and a Time To Live variance parameter.

4. The method of claim 1, further comprising:

receiving a request for a directory entry;

determining whether a corresponding directory entry is expired based at least in part on the creation time and the at least one random value; and

in the event the directory entry is expired, requesting the directory entry from the directory server.

5. The method of claim 4, further comprising:

determining that the directory server is inaccessible; and

providing the corresponding expired cached directory entry in response to the request.

6. The method of claim 4, further comprising:

determining whether the directory entry is cached; and

in the event the directory entry is not cached, requesting the directory entry from the directory server.

7. The method of claim 4, further comprising:

receiving a response from the directory server;

detecting a data integrity error based at least in part on the response from the directory server; and

providing an alert containing data integrity error information to an administrator.

8. The method of claim 4, wherein the request is received from an electronic device comprising a gateway appliance separate from a host of the directory server.

9. The method of claim 4, wherein the request is received from an electronic device comprising a host sharing cache among a plurality of gateway appliances separate from a host of the directory server.

10. The method of claim 4, wherein the request is received from an electronic device comprising an electronic device which uses one or more cached directory entries to provide at least one of:

user authentication, recipient validation, address resolution, and message routing.

11. The method of claim 1, wherein the directory server comprises an LDAP compliant directory server.

12. At least one non-transitory processor readable storage medium for storing a computer program of instructions configured to be readable by at least one processor for instructing the at least one processor to execute a computer process for performing the method as recited in claim 1.

13. An article of manufacture for directory server integration, the article of manufacture comprising:

at least one non-transitory processor readable storage medium; and

instructions stored on the at least one medium;

wherein the instructions are configured to be readable from the at least one medium by at least one processor and thereby cause the at least one processor to operate so as to;

set one or more parameters determining a range of permissible expiration times for a plurality of cached directory entries;

create, in electronic storage, a cached directory entry from a directory server;

assign a creation time to the cached directory entry; and

assign at least one random value to the cached directory entry, the random value determining an expiration time for the cached directory entry within the range of permissible expiration times, wherein randomizing the expiration time for the cached directory entry among the range of permissible expiration times for a plurality of cached directory entries reduces an amount of synchronization required between cache memory and the directory server at a point in time.

14. A system for directory server integration comprising:

one or more processors communicatively coupled to a network wherein the one or more processors are configured to;

set one or more parameters determining a range of permissible expiration times for a plurality of cached directory entries;

create a cached directory entry from a directory server;

assign a creation time to the cached directory entry; and

assign at least one random value to the cached directory entry, the random value determining an expiration time for the cached directory entry within the range of permissible expiration times wherein randomizing the expiration time for the cached directory entry among the range of permissible expiration times for a plurality of cached directory entries reduces an amount of synchronization required between cache memory and the directory server at a point in time.

15. The system of claim 14, wherein the one or more parameters determining a range of permissible expiration times for a cached directory entry comprise a maximum Time To Live parameter and a minimum Time To Live parameter.

16. The system of claim 14, wherein the one or more parameters determining a range of permissible expiration times for a cached directory entry comprise a Time To Live parameter and a Time To Live variance parameter.

17. The system of claim 14, wherein the one or more processors are further configured to:

receive a request for a directory entry;

determine whether a corresponding directory entry is expired based at least in part on the creation time and the at least one random value; and

in the event the directory entry is expired, request the directory entry from the directory server.

18. The system of claim 17, wherein the one or more processors are further configured to:

determine that the directory server is inaccessible; and

provide the corresponding expired cached directory entry in response to the request.

19. The system of claim 17, wherein the one or more processors are further configured to:

determine whether the directory entry is cached; and

in the event the directory entry is not cached,

request the directory entry from the directory server.

20. The system of claim 14, wherein the one or more processors comprise a part of a gateway appliance separate from a host of the directory data service.

21. The system of claim 14, wherein the one or more processors are further configured to use one or more cached directory entries to provide at least one of:

user authentication, recipient validation, address resolution, and message routing.