LDAP to SQL database proxy system and method

• US 8,412,750 B2
• Filed: 09/26/2005
• Issued: 04/02/2013
• Est. Priority Date: 09/26/2005
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Blackberry Limited
• Inventors: Quin, Spencer
• Primary Examiner(s): Truong, Dennis
• Application Number:
  US11/234,267
• Publication Number:
  US 20070073703A1
• Time in Patent Office: 2,745 Days
• Field of Search: 707/3, 707/1, 707/9, 707/10, 707/999.003, 707/999.001, 707/999.009, 707/770, 707/796, 707/809, 709/220
• US Class Current: 707/809
• CPC Class Codes: G06F 16/2452 Query translation
• CPC Class Codes: G06F 16/282 Hierarchical databases, e.g. IMS, LDAP data stores or Lotus Notes
• CPC Class Codes: H04L 61/4523 using lightweight directory access protocol [LDAP]
• CPC Class Codes: H04L 61/4552 Lookup mechanisms between a plurality of directories; Synchronisation of directories, e.g. metadirectories

Abstract

An LDAP to SQL proxy to adapt a relational database as a directory service for an LDAP client is provided. The database may be defined in accordance with a database schema which is external to an LDAP server serving the LDAP client. The proxy comprises LDAP to SQL query and response mappings preferably for a reduced set of LDAP operations. The proxy may comprise a mechanism to maintain a plurality of persistent database connections to reduce query processing overhead. The proxy may further be adapted to maintain persistent connections to each of at least two alternative databases for executing queries to provide enhanced failsafe operations. A plurality of LDAP to SQL proxied databases may be configured for sharing query loads to enhance scalability and performance.

Claims

1. A method of providing lightweight data access protocol (LDAP) directory services comprising:

at an LDAP server comprising an LDAP to SQL (structured query language) proxy module, configuring the module to;

receive and responding to LDAP directory service requests with at least one LDAP client;

determine a reduced set of the LDAP directory services based on credentials of the LDAP client, wherein the LDAP directory service requests includes at least one of retrieving from, storing information to, and modifying information of an SQL database;

configure the proxy module in real time to implement in real-time the specific directory services to be provided to the LDAP client, based on the reduced set of the LDAP directory services;

map the received LDAP service requests to SQL queries according to the reduced set of the LDAP directory services; and

execute the SQL queries against the SQL database to obtain SQL query results and map the SQL query results to LDAP responses;

wherein the SQL database is defined by a database schema maintained externally to and separate from the LDAP server and the LDAP server is operable to use the schema.

2. The method according to claim 1 wherein the LDAP to SQL proxy module maps LDAP service requests sufficient to facilitate only information retrieval from the database.

3. The method according to claim 1 wherein the LDAP server is configured as an OpenLDAP server.

13. The method according to claim 1 wherein each group of a LDAP server, a proxy module and a database defines a cell, the method further comprising the provision of a master database accessible to each cell.

14. The method of claim 13 further comprising the provision of a redirector server for sharing directory service requests among the cells.

15. The method of claim 13 wherein each proxy module in a particular cell is configured to execute directory service requests against the master database if a database of the particular cell is unavailable.

4. A non-transitory computer readable medium comprising instructions, which, when executed by a computing device, adapt an LDAP server for providing directory services to connect an SQL database configured for SQL operation to at least one LDAP client configured for LDAP operation, said instructions comprising:

receive and responding to LDAP directory service requests with at least one LDAP client;

determine a reduced set of the LDAP directory services based on credentials of the LDAP client, wherein the LDAP directory service requests includes at least one of retrieving from, storing information to, and modifying information of an SQL database;

configure the proxy module in real time to implement in real-time the specific directory services to be provided to the LDAP client, based on the reduced set of the LDAP directory services;

map the received LDAP service requests to SQL queries according to the reduced set of the LDAP directory services; and

execute the SQL queries against the SQL database to obtain SQL query results and map the SQL query results to LDAP responses;

wherein the SQL database is defined by a database schema-maintained externally to and separate from the LDAP server and the LDAP server is operable to use the schema.

5. The computer readable medium according to claim 4 wherein the instructions perform table lookups to transform LDAP to SQL attributes and vice versa.

6. The computer readable medium according to claim 4 wherein the instructions maintain a pool of persistent connections to the database for executing queries.

7. The computer readable medium according to claim 4 wherein the instructions maintain a pool of persistent connections to each of a cell database and a master database for executing queries to enhance failsafe operations.

8. A computer system comprising:

(a) at least one lightweight data access protocol LDAP server for providing directory services, the at least one server comprising;

(b) an LDAP to Structured Query Language SQL proxy module configured for adapting the LDAP server to connect a database accessible by SQL to at least one LDAP client, the proxy module configured to;

receive and responding to LDAP directory service requests with at least one LDAP client;

determine a reduced set of the LDAP directory services based on credentials of the LDAP client, wherein the LDAP directory service requests includes at least one of retrieving from, storing information to, and modifying information of an SQL database;

configure the proxy module in real time to implement in real-time the specific directory services to be provided to the LDAP client, based on the reduced set of the LDAP directory services;

map the received LDAP service requests to SQL queries according to the reduced set of the LDAP directory services; and

execute the SQL queries against the SQL database to obtain SQL query results and map the SQL query results to LDAP responses;

wherein the SQL database is defined by a database schema-maintained externally to and separate from the LDAP server and the LDAP server is operable to use the schema.

9. The computer system according to claim 8 wherein each group of LDAP server, LDAP to SQL proxy and database defines a cell and said computer system further comprising a master database accessible by each cell.

10. The computer system according to claim 9 further comprising a redirector server to share directory service requests among the cells.

11. The computer system according to claim 9 wherein each proxy in a particular cell is configured to execute directory service requests against the master database if the database of the particular cell is unavailable.

12. The computer system according to claim 11 wherein each proxy maintains a plurality of persistent connections to each of the database of the proxy'"'"'s cell and the master database, said connections providing access to execute said SQL queries to enhance failsafe operations.

16. The system according to claim 8 wherein the LDAP server is an Open LDAP server.