Method and apparatus for dynamically and incrementally modifying NIS maps

• US 8,321,523 B1
• Filed: 04/24/2006
• Issued: 11/27/2012
• Est. Priority Date: 04/24/2006
• Status: Active Grant

• Current Assignee: Delinea
• Original Assignee: Centrify Corporation
• Inventors: Moore, Paul, Lawson, Craig L.
• Primary Examiner(s): Nguyen, Thu Ha
• Application Number:
  US11/410,543
• Time in Patent Office: 2,409 Days
• Field of Search: 709/217, 709/223, 709/224, 714/39, 714/47.1, 702/190, 370/252
• US Class Current: 709/217
• CPC Class Codes: G06F 16/2358 Change logging, detection, and notification replication G06F16/27
• CPC Class Codes: G06F 16/2365 Ensuring data consistency and integrity
• CPC Class Codes: G06F 16/252 between a Database Management System and a front-end application

Abstract

A method of maintaining Network Information Service (NIS) maps where modifying information about any of the network entities described by the NIS maps requires only incremental update of the NIS maps instead of full NIS map regeneration. A further method of detecting when network entity records on a network directory server change so that NIS map updates are necessary.

Claims

1. A method comprising:

copying a plurality of information records from a network directory database to a Network Information Service (“

NIS”

) map;

monitoring the database to detect a change to at least one of the plurality of information records;

if a change is detected, updating only a portion of the NIS map necessary to reflect the change to the at least one information record;

receiving a NIS map request from a client;

locating data corresponding to the request in the NIS map; and

transmitting a NIS response containing data from the NIS map to the client,

wherein said monitoring the database comprises;

obtaining a first time stamp of a last modification of a database record;

periodically obtaining a second time stamp of the last modification of a database record; and

comparing the first time stamp to the second time stamp.

2. The method of claim 1 wherein one information record contains a host name and an Internet Protocol (“

IP”

) address, or a user name and a password, or a user ID and a password.

3. The method of claim 1 wherein one information record contains a group name and group security information, a network name and a network IP address, or a service name and a service description.

4. The method of claim 1 wherein the NIS request is a first NIS request to obtain information about a first username and the NIS response is a first NIS response, the method further comprising:

receiving a second NIS request from the client to obtain information about a next username;

locating the next username among the copied plurality of information records; and

transmitting a second NIS response containing data about the next user name.

5. The method of claim 1 wherein copying a plurality of information records from a network directory database comprises:

preparing a Lightweight Directory Access Protocol (“

LDAP”

) request;

transmitting the LDAP request to an LDAP server; and

receiving a response including the plurality of information records from the LDAP server.

6. The method of claim 1 wherein copying a plurality of information records from a network directory database comprises:

preparing a Microsoft Active Directory (“

AD”

) request;

transmitting the AD request to an AD server; and

receiving a response including the plurality of information records from the AD server.

7. The method of claim 1 wherein copying a plurality of information records from a network directory database comprises:

preparing a request for a relational database;

transmitting the request to a relational database server; and

receiving a response including the plurality of information records from the relational database server.

8. A non-transitory computer-readable medium containing instructions that, when executed by a general-purpose computing system, cause the system to perform operations comprising:

copying a plurality of information records from a database;

monitoring the database to detect a change to at least one of the plurality of information records;

if a change is detected, updating only a portion of the copied plurality of information records necessary to reflect the change to the at least one information record;

receiving a Network Information Service (“

NIS”

) request from a client;

locating data corresponding to the request among the copied plurality of information records; and

transmitting a NIS response containing data from one of the copied plurality of information records to the client wherein said monitoring the database comprises;

obtaining a first time stamp of a last modification of a database record;

periodically obtaining a second time stamp of the last modification of a database record; and

comparing the first time stamp to the second timestamp.

9. The non-transitory computer-readable medium of claim 8 wherein one information record contains a host name and art Internet Protocol (“

IP”

) address, or a user name and a password, or a user ID and a password.

10. The non transitory computer-readable medium of claim 8 wherein one information record contains a group name and group security information, or a network name and a network IP address, or a service name and a service description.

11. The non-transitory computer-readable medium of claim 8 wherein the NIS request is a first NIS request to obtain information about a first username and the NIS response is a first NIS response, the computer-readable medium performing further operations comprising:

receiving a second NIS request from the client to obtain information about a next username;

locating the next username among the copied plurality of information records; and

transmitting a second NIS response containing data about the next user name.

12. The non-transitory computer-readable medium of claim 8 wherein copying a plurality of information records from a database comprises:

preparing a Lightweight Directory Access Protocol (“

LDAP”

) request;

transmitting the LDAP request to an LDAP server; and

receiving a response including the plurality of information records from the LDAP server.

13. The non-transitory computer-readable medium of claim 8 wherein copying a plurality of information records from a database comprises:

preparing a Microsoft Active Directory (“

AD”

) request;

transmitting the AD request to an AD server; and

receiving a response including the plurality of information records from the AD server.

14. The non-transitory computer-readable medium of claim 8 wherein copying a plurality of information records from a database comprises:

preparing a request for a relational database;

transmitting the request to a relational database server; and

receiving a response including the plurality of information records from the relational database server.

15. The non-transitory computer-readable medium of claim 8 wherein updating the copied plurality of information records comprises:

retrieving from the database only information records that are different from records in the copied plurality of information records.

16. The non-transitory computer-readable medium of claim 8 wherein updating the copied plurality of information records comprises:

removing from the copied plurality of information records information records that do not exist in the database.