Method and apparatus for creating RFC-2307-compliant zone records in an LDAP directory without schema extensions
View Patent ↗A global user record that can be found in a search for posixAccount-type records is created in a database, then a zone user record of a type that cannot be found in a search for posixAccount-type records is associated with it. Finally, the zone user record is augmented so that it, too, will be found in a search for posixAccount-type records. Global and zone-specific group records are created similarly.
1. A method comprising:
creating a global user record in a Lightweight Directory Access Protocol (“LDAP”) database which is accessed and updated by a server, the global user record of a type responsive to an LDAP search for a posixAccount record;
instantiating and populating a zone user record with data wherein the zone user record's type is chosen so that it is associatable with the global user record;
associating the zone user record with the global user record in the LDAP database, the zone user record of a type unresponsive to an LDAP search for a posixAccount record; and
augmenting the zone user record of the type unresponsive to an LDAP search for a posixAccount record to cause it to become responsive to an LDAP search for a posixAccount record by a dynamically linked posixAccount or a derived class thereof, wherein the dynamically linked posixAccount or a derived class thereof permits the zone user record to appear to be a record of type posixAccount thereby becoming responsive to the LDAP search for a posixAccount.
2. The method of claim 1 wherein the LDAP database is a Microsoft Active Directory database.
3. The method of claim 1 wherein the global user record is a record of type User.
4. The method of claim 1 wherein the zone user record is a record of type Service Connection Point (“SCP”).
5. The method of claim 1 wherein said associating comprises adding a distinguished name “(DN”) of the global user record as an attribute of the zone user record.
6. The method of claim 1 wherein said augmenting comprises:
adding any mandatory attributes of a posixAccount record that are missing from the zone user record; and
adding a name “posixAccount” to an ObjectClass attribute of the zone user record.
7. A non-transitory computer-readable medium containing instructions and data to cause a programmable processor to perform operations comprising:
creating a User record in a Microsoft Active Directory (“AD”) database;
instantiating and populating a second record with data wherein the second record's type is chosen so that is associatable with the User record and lacks posixAccount classification;
associating the second record that lacks posixAccount classification with the User record; and
augmenting the second record of the type that lacks posixAccount classification with the User record with a dynamically-linked auxiliary class, the dynamically-linked auxiliary class to bestow posixAccount classification on the second record, wherein the dynamically linked auxiliary class permits the second record to appear to be a record having a posixAccount classification to cause the second record to become responsive to a search for a record having a posixAccount classification.
8. The non-transitory computer-readable medium of claim 7 , containing additional instructions and data to cause the programmable processor to perform operations comprising:
receiving a Lightweight Directory Access Protocol (“LDAP”) request from a client, the LDAP request to obtain data from a record of type posixAccount; and
returning data from the second record to the client.
9. The non-transitory computer-readable medium of claim 7 wherein a type of the second record is Service Connection Point.