Method and apparatus for creating compliant zone records in an LDAP directory without schema extensions
View Patent ↗A global user record that can be found in a search for posixAccount-type records is created in a database, then a zone user record of a type that cannot be found in a search for posixAccount-type records is associated with it. Finally, the zone user record is augmented so that it, too, will be found in a search for posixAccount-type records. Global and zone-specific group records are created similarly.
1. A system comprising:
a processor and a storage medium for storing a Lightweight Directory Access Protocol (“LDAP”) database presenting a hierarchical view of a plurality of typed data records, wherein the data records have permissable data relationships governed by a schema, and the processor executes instructions for accessing and modifying the data records stored on the storage medium; and
said typed data records including a global user record of a type responsive to an LDAP search for a posixAccount record, and a zone user record instantiated and populated with data, wherein the zone user record type is chosen so that it is associatable with the global user record and is of a type unresponsive to an LDAP search for a posixAccount record, said global user record and said zone user record having a container-contained relationship in the database;
wherein the zone user record is augmented by a dynamically linked posixAccount or a derived class thereof so that the zone user record appears as a record which of type posixAccount and becomes responsive to the LDAP search for a posixAccount record and maintains conformity with the schema.
2. The system of claim 1 wherein the LDAP database is a Microsoft Active Directory database.
3. The system of claim 2 , wherein the schema is a default Microsoft Active Directory database schema.
4. The system of claim 1 wherein the global user record is a record of type User.
5. The system of claim 1 wherein the zone user record is a record of type Service Connection Point (“SCP”).
6. The system of claim 1 wherein the global user record is a record of type Group.
7. A system comprising:
a processor and a storage medium for storing a Lightweight Directory Access Protocol (“LDAP”) database presenting a hierarchical view of a plurality of typed data records, wherein the data records have permissable data relationships governed by a schema, and the processor executes instructions for accessing and modifying the data records stored on the storage medium; and
said typed data records including a global group record of a type responsive to an LDAP search for a posixAccount record, and a zone group record instantiated and populated with data, wherein the zone group record type is chosen so that it is associatable with the global group record and is of a type unresponsive to an LDAP search for a posixAccount record, said global group record and said zone group record having a container-contained relationship in the database;
wherein the zone group record is augmented by a dynamically linked posixAccount or a derived class thereof so that the zone group record appears as a record of type posixAccount and becomes responsive to the LDAP search for a posixAccount record and maintains conformity with the schema.
8. The system of claim 7 wherein the LDAP database is a Microsoft Active Directory database.
9. The system of claim 2 , wherein the schema is a default Microsoft Active Directory database schema.
10. The system of claim 7 wherein the global group record is a record of type User.
11. The system of claim 7 wherein the zone group record is a record of type Service Connection Point (“SCP”).
12. The system of claim 7 wherein the global group record is a record of type Group.