Method and apparatus for creating compliant zone records in an LDAP directory without schema extensions

• US 9,965,496 B2
• Filed: 08/17/2016
• Issued: 05/08/2018
• Est. Priority Date: 01/23/2007
• Status: Active Grant

• Current Assignee: Delinea
• Original Assignee: Centrify Corporation
• Inventors: Moore, Paul
• Primary Examiner(s): Ruiz, Angelica
• Application Number:
  US15/239,776
• Publication Number:
  US 20170046365A1
• Time in Patent Office: 629 Days
• CPC Class Codes: G06F 16/16 File or folder operations, e.g. details of user interfaces specifically adapted to file systems
• CPC Class Codes: G06F 16/164 File meta data generation
• CPC Class Codes: G06F 16/20 of structured data, e.g. relational data
• CPC Class Codes: G06F 16/211 Schema design and management
• CPC Class Codes: G06F 16/27 Replication, distribution or synchronisation of data between databases or within a distributed database system; Distributed database system architectures therefor
• CPC Class Codes: G06F 16/282 Hierarchical databases, e.g. IMS, LDAP data stores or Lotus Notes
• CPC Class Codes: H04L 65/00 Network arrangements, protocols or services for supporting real-time applications in data packet communication real-time or near real-time messaging, e.g. instant messaging [IM] H04L51/04; selective video distribution H04N21/00

Abstract

A global user record that can be found in a search for posixAccount-type records is created in a database, then a zone user record of a type that cannot be found in a search for posixAccount-type records is associated with it. Finally, the zone user record is augmented so that it, too, will be found in a search for posixAccount-type records. Global and zone-specific group records are created similarly.

Claims

1. A system comprising:

a processor and a storage medium for storing a Lightweight Directory Access Protocol (“

LDAP”

) database presenting a hierarchical view of a plurality of typed data records, wherein the data records have permissable data relationships governed by a schema, and the processor executes instructions for accessing and modifying the data records stored on the storage medium; and

said typed data records including a global user record of a type responsive to an LDAP search for a posixAccount record, and a zone user record instantiated and populated with data, wherein the zone user record type is chosen so that it is associatable with the global user record and is of a type unresponsive to an LDAP search for a posixAccount record, said global user record and said zone user record having a container-contained relationship in the database;

wherein the zone user record is augmented by a dynamically linked posixAccount or a derived class thereof so that the zone user record appears as a record which of type posixAccount and becomes responsive to the LDAP search for a posixAccount record and maintains conformity with the schema.

2. The system of claim 1 wherein the LDAP database is a Microsoft Active Directory database.

3. The system of claim 2, wherein the schema is a default Microsoft Active Directory database schema.

4. The system of claim 1 wherein the global user record is a record of type User.

5. The system of claim 1 wherein the zone user record is a record of type Service Connection Point (“

SCP”

).

6. The system of claim 1 wherein the global user record is a record of type Group.

9. The system of claim 2, wherein the schema is a default Microsoft Active Directory database schema.

7. A system comprising:

a processor and a storage medium for storing a Lightweight Directory Access Protocol (“

LDAP”

) database presenting a hierarchical view of a plurality of typed data records, wherein the data records have permissable data relationships governed by a schema, and the processor executes instructions for accessing and modifying the data records stored on the storage medium; and

said typed data records including a global group record of a type responsive to an LDAP search for a posixAccount record, and a zone group record instantiated and populated with data, wherein the zone group record type is chosen so that it is associatable with the global group record and is of a type unresponsive to an LDAP search for a posixAccount record, said global group record and said zone group record having a container-contained relationship in the database;

wherein the zone group record is augmented by a dynamically linked posixAccount or a derived class thereof so that the zone group record appears as a record of type posixAccount and becomes responsive to the LDAP search for a posixAccount record and maintains conformity with the schema.

8. The system of claim 7 wherein the LDAP database is a Microsoft Active Directory database.

10. The system of claim 7 wherein the global group record is a record of type User.

11. The system of claim 7 wherein the zone group record is a record of type Service Connection Point (“

SCP”

).

12. The system of claim 7 wherein the global group record is a record of type Group.