Nested queries with index

• US 7,730,084 B2
• Filed: 11/01/2006
• Issued: 06/01/2010
• Est. Priority Date: 11/01/2006
• Status: Active Grant

• Current Assignee: Red Hat, Inc. (International Business Machines Corporation)
• Original Assignee: Red Hat, Inc. (International Business Machines Corporation)
• Inventors: Rowley, Peter A., Parkinson, Steven W.
• Primary Examiner(s): Breene; John E
• Assistant Examiner(s): LE, THU NGUYET T
• Application Number:
  US11/591,791
• Publication Number:
  US 20080104028A1
• Time in Patent Office: 1,308 Days
• Field of Search: None
• US Class Current: 707/774
• CPC Class Codes: H04L 61/4523 using lightweight directory access protocol [LDAP]
• CPC Class Codes: H04L 61/4552 Lookup mechanisms between a plurality of directories; Synchronisation of directories, e.g. metadirectories

Abstract

Values for virtual recursive attributes are generated for distinguished name entries in a lightweight directory access protocol directory by navigating through the directory tree starting at the distinguished name entry specified by an input value. An attribute list of the values for the virtual recursive attributes may be cached or indexed. In another aspect, attribute lists are generated for all branches of the directory tree.

Claims

1. A method comprising:

receiving, by a lightweight directory access protocol (LDAP) directory server that performs directory queries on an LDAP database, a request to process a nested query, the request including an input attribute and an input value for a distinguished name (DN) entry, wherein the input attribute and the DN entry correspond to objects defined in a schema for the LDAP database; and

generating, by the LDAP directory server in response to the request, a virtual recursive attribute index that defines values for a virtual recursive attribute that does not correspond to an object defined in the schema because a value of the virtual recursive attribute is determined by a value of a DN of an entry that the virtual recursive attribute points plus a value of a DN of the pointed-to entry, wherein the generating further comprises;

navigating through a directory tree of the LDAP directory server starting at the DN entry specified by the input value;

for each current DN entry navigated to in the directory tree, adding a DN value from an attribute of the current DN entry as an entry in the virtual recursive attribute index if that attribute is equal to the input attribute; and

returning the virtual recursive attribute index when a value for the attribute equal to the input attribute in a navigated-to DN entry is at least one of null or empty; and

utilizing, by the LDAP directory server, the generated virtual recursive attribute index to process standard nested queries sent to the LDAP directory server;

wherein modifications to both the value of the DN of the entry that the virtual recursive attribute points and the value of the DN of the pointed-to entry are reflected by flagging the virtual recursive attribute as a relational attribute and identifying an attribute used for a relation between the values.

2. The method of claim 1 further comprising:

outputting the attribute list as a response to a query that specifies the input attribute and the input value for the DN entry.

3. The method of claim 1, further comprising:

caching the attribute list.

4. The method of claim 1, further comprising:

generating an index for the entries in the attribute list.

5. The method of claim 1, wherein the navigating comprises:

using the extracted DN value of a current DN entry to locate a next DN entry in the directory tree.

6. The method of claim 1, wherein an attribute list is created for each branch of the directory tree.

7. A computer-readable storage medium having executable instructions to cause a processor to perform a process comprising:

receiving a request to process a nested query, the request including an input attribute and an input value for a distinguished name (DN) entry, wherein the input attribute and the DN entry correspond to objects defined in a schema for the lightweight directory access protocol (LDAP) directory server; and

generating, in response to the request, a virtual recursive attribute index that defines values for a virtual recursive attribute that does not correspond to an object defined in the schema because a value of the virtual recursive attribute is determined by a value of a DN of an entry that the virtual recursive attribute points plus a value of a DN of the pointed-to entry, wherein the generating further comprises;

navigating through a directory tree of the LDAP directory server starting at the DN entry specified by the input value;

for each current DN entry navigated to in the directory tree, adding DN value from an attribute of the current DN entry as an entry in the virtual recursive attribute index if that attribute is equal to the input attribute; and

returning the virtual recursive attribute index when a value for the attribute equal to the input attribute in a navigated-to DN entry is at least one of null or empty; and

utilizing the generated virtual recursive attribute index to process standard nested queries sent to the LDAP directory server;

wherein modifications to both the value of the DN of the entry that the virtual recursive attribute points and the value of the DN of the pointed-to entry are reflected by flagging the virtual recursive attribute as a relational attribute and identifying an attribute used for a relation between the values.

8. The computer-readable storage medium of claim 7, wherein the process further comprises:

outputting the attribute list as a response to a query that specifies the input attribute and the input value for the DN entry.

9. The computer-readable storage medium of claim 7, wherein the process further comprises:

caching the attribute list.

10. The computer-readable storage medium of claim 7, wherein the process further comprises:

generating an index for the entries in the attribute list.

11. The computer-readable storage medium of claim 7, wherein the navigating comprises:

using the extracted distinguished name value of a current DN entry to locate a next DN entry in the directory tree.

12. The computer-readable storage medium of claim 7, wherein an attribute list is created for each branch of the directory tree.

13. A computer system comprising:

a processor coupled to a memory through a bus; and

instructions executed from the memory by the processor to cause the processor to perform a process comprising;

receiving a request to process a nested query, the request including an input attribute and an input value for a distinguished name (DN) entry, wherein the input attribute and the DN entry correspond to objects defined in a schema for the lightweight directory access protocol (LDAP) directory server; and

generating, in response to the request, a virtual recursive attribute index that defines values for a virtual recursive attribute that does not correspond to an object defined in the schema because a value of the virtual recursive attribute is determined by a value of a DN of an entry that the virtual recursive attribute points plus a value of a DN of the pointed-to entry, wherein the generating further comprises;

navigating through a directory tree of the LDAP directory server starting at the DN entry specified by the input value;

for each current DN entry navigated to in the directory tree, adding a DN value from an attribute of the current DN entry as an entry in the virtual recursive attribute index if that attribute is equal to the input attribute; and

returning the virtual recursive attribute index list when a value for the attribute equal to the input attribute in a navigated-to DN entry is at least one of null or empty; and

utilizing the generated virtual recursive attribute index to process standard nested queries sent to the LDAP directory server;

wherein modifications to both the value of the DN of the entry that the virtual recursive attribute points and the value of the DN of the pointed-to entry are reflected by flagging the virtual recursive attribute as a relational attribute and identifying an attribute used for a relation between the values.

14. The computer system of claim 13, wherein the process further comprises:

outputting the attribute list as a response to a query that specifies the input attribute and the input value for the DN entry.

15. The computer system of claim 13, wherein the process further comprises:

caching the attribute list.

16. The computer system of claim 13, wherein the process further comprises:

generating an index for the entries in the attribute list.

17. The computer system of claim 13, wherein the navigating comprises:

using the extracted DN value of a current DN entry to locate a next distinguished name entry in the directory tree.

18. The computer system of claim 13, wherein an attribute list is created for each branch of the directory tree.