Per entry changelog

• US 20080126438A1
• Filed: 11/29/2006
• Published: 05/29/2008
• Est. Priority Date: 11/29/2006
• Status: Active Grant

• Current Assignee: Red Hat, Inc. (International Business Machines Corporation)
• Original Assignee: Red Hat, Inc. (International Business Machines Corporation)
• Inventors: Rowley, Peter Andrew
• Granted Patent: US 7,761,405 B2
• Time in Patent Office: Days
• US Class Current: 707/202
• CPC Class Codes: G06F 16/9027 Trees

Abstract

A method and apparatus for managing log per entry in a directory server is described. In one embodiment, the directory server receives a request to operate on an entry in the directory server. The directory server operates on the entry. The information of the operation on the entry is stored in a log attribute of the entry.

Claims

1. A computer-implement method for managing a directory server, the method comprising:

receiving a request to operate on an entry in the directory server;

operating on the entry; and

storing information of the operation in a log attribute of the entry.

2. The method of claim 1 wherein the operation comprises a change to the entry.

3. The method of claim 1 wherein the directory server comprises a Lightweight Directory Access Protocol (LDAP) repository.

4. The method of claim 1 wherein the information of the operation further comprises a time of the operation, a method of the operation, an identity of the origin of the request, a value of an attribute of the entry prior to the operation, and a value of an attribute of the entry after the operation.

5. The method of claim 1 wherein the log attribute comprises an entryChangeLog attribute.

6. The method of claim 1 wherein the log attribute is configured to store the information of the operation for a predefined period of time.

7. The method of claim 1 wherein the log attribute is configured to store the information of the operation for a limited number of operations on the entry.

8. The method of claim 1 wherein the log attribute is configured to delete one or more values of the log attribute in response to a predefined operation on the entry.

9. The method of claim 1 further comprising:

retrieving a history of changes to the entry without performing a script to parse a main audit log of the directory server.

11. The apparatus of claim 1 wherein the operation comprises a change to the entry.

12. The apparatus of claim 1 wherein the directory server comprises a Lightweight Directory Access Protocol (LDAP) repository.

13. The apparatus of claim 1 wherein the information of the operation further comprises a time of the operation, a method of the operation, an identity of the origin of the request, a value of an attribute of the entry prior to the operation, and a value of an attribute of the entry after the operation.

14. The apparatus of claim 1 wherein the log attribute comprises an entryChangeLog attribute.

15. The apparatus of claim 1 wherein the log attribute is configured to store the information of the operation for a predefined period of time.

16. The apparatus of claim 1 wherein the log attribute is configured to store the information of the operation for a limited number of operations on the entry.

17. The apparatus of claim 1 wherein the log attribute is configured to delete one or more values of the log attribute in response to a predefined operation on the entry.

18. The apparatus of claim 1 wherein the directory server is to further retrieve a history of changes to the entry without performing a script to parse a main audit log of the directory server.

22. The article of manufacture of claim 1 wherein the information of the operation further comprises a time of the operation, a method of the operation, an identity of the origin of the request, a value of an attribute of the entry prior to the operation, and a value of an attribute of the entry after the operation.

23. The article of manufacture of claim 1 wherein the log attribute comprises an entryChangeLog attribute.

24. The article of manufacture of claim 1 wherein the log attribute is configured to store the information of the operation for a predefined period of time.

25. The article of manufacture of claim 1 wherein the log attribute is configured to store the information of the operation for a limited number of operations on the entry.

26. The article of manufacture of claim 1 wherein the log attribute is configured to delete one or more values of the log attribute in response to a predefined operation on the entry.

27. The article of manufacture of claim 1 wherein the method further comprises:

retrieving a history of changes to the entry without performing a script to parse a main audit log of the directory server.

10. An apparatus comprising:

a directory server to receive a request to operate on an entry in the directory server, to operate on the entry, and to store information of the operation in a log attribute of the entry.

19. An article of manufacture comprising:

a machine-accessible storage medium including data that, when accessed by a machine, cause the machine to perform a method comprising;

receiving a request to operate on an entry in the directory server;

operating on the entry; and

storing information of the operation in a log attribute of the entry.

20. The article of manufacture of claim 19 wherein the operation comprises a change to the entry.

21. The article of manufacture of claim 19 wherein the directory server comprises a Lightweight Directory Access Protocol (LDAP) repository.