Systems and methods for interoperation of directory services
Systems and methods according to the present invention may include providing a first directory service program, a second directory service program, and a directory service access program for handling client application information requests. The directory service access program may direct and manage the client application information requests to either the first directory service program if the requested information is associated with the first directory service program or the second directory service program if requested information is associated with the second directory service program. The present invention may also include providing a data service synchronizer that replicates certain information from the first directory service program to the second directory service program; monitors the first directory service program for changes; and updates the second directory service program with changes from the first directory service program such that the first and second directory service programs may interoperate with one another.
1. A method to provide interoperation of directory services resident on a computer system comprising:
on a computer system with a first directory service resident and managing a network, installing a second directory service resident on a network computer system, selected application-specific schema changes being prohibited in said first directory service and allowed in said second directory service;
starting a directory service access library to handle client application information requests from directory-enabled applications and managing access as a front end access point to the first and the second directory services, the directory service access library directing the client application information requests to the first directory service and selectively redirecting the client application information requests to the second directory service when requested information is associated with the second directory service, such that the first and the second directory services interoperate with one another on the network;
selectively migrating data from said second directory service to said first directory service, wherein selectively migrating data comprises removing installed instance entries in the first directory service indicating the presence of the second service and extending said schema extensions to the first directory service; and
selectively disabling said second directory service, said directory service access library being prevented from detecting said disabled second directory service, wherein disabling said second directory service comprises disabling publishing mode for the second directory service.
2. The method of claim 1 , further comprising:
installing an instance entry in the first directory service indicating the presence of the second service and when said instance entry is found, said directory service access library redirects the client application information requests; and
extending said application-specific schema changes as schema extensions to the second directory service, wherein data pertaining to schema objects may be moved from the first directory service to the second directory service.
3. The method of claim 1 , further comprising installing the second directory service with a specific instance identification.
4. The method of claim 1 , further comprising monitoring and comparing the information in the first and the second directory services and selectively copying information from the first directory service to the second directory service.
5. The method of claim 1 , further comprising at least periodically copying information from the first directory service to the second directory service based upon the monitoring of the data in the first and the second directory services.
6. The method of claim 1 , further comprising copying the extended application-specific schema objects from the second directory service to the first directory service.
7. The method of claim 1 , further comprising uninstalling the disabled second directory service after copying the extended application-specific schema objects from the second directory service to the first directory service when data is selectively migrated.
8. The method of claim 7 , wherein the first directory service is an Active Directory (AD) directory service and the second directory service is an Active Directory Application Mode directory service installed at system initialization.
9. A method to provide interoperation of directory services resident on a computer system comprising:
on a computer system with a first directory service resident and managing a network, installing a second directory service resident on the computer system, selected application-specific schema changes being prohibited in said first directory service and allowed in said second directory service;
starting a directory service access library, said directory service access library being a front end access point from directory-enabled applications to the first directory service and the second directory service, directory-enabled application requests accessing the first directory service and selectively redirected to access the second directory service through the directory service access library;
starting a data service synchronizer that replicates certain information from the first directory service to the second directory service and that monitors the first directory service for changes in the first directory service and periodically updates the second directory service with changes from the first directory service such that the first and the second directory services-may interoperate with one another; and
selectively migrating data from said second directory service to said first directory service and disabling publishing mode for said second directory service, wherein selectively migrating data comprises removing installed instance entries in the first directory service indicating the presence of the second service and extending said schema extensions to the first directory service, said directory service access library directing all subsequent requests to said first directory service.
10. The method of claim 9 , wherein the first directory service is an Active Directory (AD) directory service and the second directory service is configured to extend said application-specific schema changes as AD schema extensions to objects associated with an application accessing the secondary directory service.
11. The method of claim 10 , wherein the second directory service is an Active Directory Application Mode directory service installed at start-up.
12. The method of claim 9 , wherein the directory service access library is an arbiter handling client application information requests from said directory-enabled applications, the directory service access arbiter directing the client application information requests to the first directory service and redirecting the client application information requests to the second directory service when requested information is associated with the second directory service.
13. A computer program product for maintaining interoperating resident directory services, said computer program product comprising a computer usable medium having computer readable program code stored thereon, said stored computer readable program code comprising:
computer readable program code means for providing a first directory service on a computer, application-specific schema changes being selectively prohibited in said first directory service, the computer with the first directory services managing a network;
computer readable program code means for providing said computer with a second directory service different than said first directory service and allowing said selectively prohibited application-specific schema changes;
computer readable program code means for directory service access arbitration handling client application information requests from directory-enabled applications, directing client application information requests to the first directory service and for selectively redirecting the client application information requests to the second directory service when requested information is associated with the second directory service, such that the first and the second directory services-interoperate with one another on the network; and
computer readable program code means for selectively migrating data from said second directory service to said first directory service and disabling publishing mode for said second directory service, wherein selectively migrating data comprises removing installed instance entries in the first directory service indicating the presence of the second service and extending said schema extensions to the first directory service, said directory service access library directing all subsequent requests to said first directory service.
14. A computer program product as in claim 13 , wherein said computer readable program code means for said first directory service comprises computer readable program code means for providing an Active Directory (AD) service and said computer readable program code means for providing the second directory service comprises computer readable program code means for extending application-specific schema changes as AD schema extensions to objects associated with an application accessing the secondary directory service.
15. A computer program product as in claim 14 , wherein said computer readable program code means for said second directory service comprises computer readable program code means for providing an Active Directory Application Mode directory service installed at start-up.
16. A computer program product as in claim 13 , further comprising computer readable program code means for synchronizing directory services providing communications and, synchronizing data, between the first directory service and the second directory service.
17. A computer program product as in claim 16 , wherein the computer readable program code means for synchronizing further comprises computer readable program code means for periodically consulting with the first directory service and the second directory service to confirm that appropriate information is present in the first and the second directory service.
18. A computer program product as in claim 16 , wherein the computer readable program code means for synchronizing replicates and transfers information from the first directory service to the second directory service to maintain appropriate data storage.
19. A computer program product as in claim 13 , wherein computer readable program code means for said secondary directory service transfers said objects from the second directory service to the first directory service.