# US 2010/0169485 A1 · Directory viewports

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2010/0169485 A1
- Document ID: US20100169485A1
- Status: Published application
- Kind: A1
- Application number: 12/345,018
- Filed: 2008-12-29
- Published: 2010-07-01
- Earliest claimed: 2008-12-29
- Assignees: International Business Machines Corporation
- Inventors: Kristin M. Hazlewood; John M. McConaughy; Gary D. Williams
- Web page: https://patentgrep.com/patent/US20100169485A1

## CPC

- H04L 61/4523: using lightweight directory access protocol [LDAP]
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

The illustrative embodiments provide for filtering LDAP requests and server responses. A viewport server is configured with filtering rules for responses from a directory server where the responses are generated to fulfill requests from a client application. The filtering rules determine which data is to be forwarded to the client application. One or more responses are intercepted from the directory server to the client application. The one or more intercepted responses are filtered according to the filtering rules to produce a set of filtered responses. The set of filtered responses are then sent to the client application.

## Claims

### Claim 1

A method, in a data processing system, for filtering requests and server responses, the method comprising:
configuring a viewport server with filtering rules for responses from a directory server, wherein the responses are generated to fulfill requests from a client application and wherein the filtering rules determine which data is to be forwarded to the client application;
intercepting one or more responses from the directory server to the client application;
filtering the one or more intercepted responses according to the filtering rules to produce a set of filtered responses; and
sending the set of filtered responses to the client application.

### Claim 2 (depends on 1)

The method of claim 1, further comprising:
responsive to the one or more intercepted responses failing to require filtering, sending the one or more intercepted responses to the client application as an unfiltered response.

### Claim 3 (depends on 1)

The method of claim 1, wherein the filtering rules further comprise filtering rules for the requests.

### Claim 4 (depends on 3)

The method of claim 3, further comprising:
determining if the request from the client application'meets the filtering rules for the requests; and
responsive to the request meeting the filtering rules for requests, directly sending the request to the directory server.

### Claim 5 (depends on 4)

The method of claim 4, further comprising:
responsive to the request failing to meet the filtering rules for requests, filtering the request based on specific filtering rules for filtering the request;
determining if at least one valid operation remains in the request after applying the specific filtering rules for filtering the request; and
responsive to a valid operation remaining in the request after applying the specific filtering rules for filtering the request, sending the request to the directory server with which the viewport is associated.

### Claim 6 (depends on 5)

The method of claim 5, further comprising:
responsive to no valid operation remaining in the request after applying the specific filtering rules for filtering the request, returning an error message to the client application.

### Claim 7 (depends on 1)

The method of claim 1, wherein the filtering rules are based on a rule set.

### Claim 8 (depends on 7)

The method of claim 7, wherein the rule set comprises at least one of object classes, attributes, suffixes, or naming contexts that are accessible by the client application.

### Claim 9 (depends on 7)

The method of claim 7, wherein the rule set comprises at least one of object classes, attributes, suffixes, or naming contexts that are inaccessible by the client application.

### Claim 10 (depends on 7)

The method of claim 7, where in the rule set comprises at least one of a configured function or a hash of entry names that can be accessed by the client application.

### Claim 11

A computer program product comprising a computer recordable medium having a computer readable program recorded thereon, wherein the computer readable program, when executed on a computing device, causes the computing device to:
configure a viewport server with filtering rules for responses from a directory server, wherein the responses are generated to fulfill requests from a client application and wherein the filtering rules determine which data is to be forwarded to the client application;
intercept one or more responses from the directory server to the client application;
filter the one or more intercepted responses according to the filtering rules to produce a set of filtered responses; and
send the set of filtered responses to the client application.

### Claim 12 (depends on 11)

The computer program product of claim 11, wherein the filtering rules further comprise filtering rules for the requests.

### Claim 13 (depends on 12)

The computer program product of claim 12, wherein the computer readable program further causes the computing device to:
determine if the request from the client application meets the filtering rules for the requests; and
responsive to the request meeting the filtering rules for requests, directly send the request to the directory server.

### Claim 14 (depends on 13)

The computer program product of claim 13, wherein the computer readable program further causes the computing device to:
responsive to the request failing to meet the filtering rules for requests, filter the request based on specific filtering rules for filtering the request;
determine if at least one valid operation remains in the request after applying the specific filtering rules for filtering the request; and
responsive to a valid operation remaining in the request after applying the specific filtering rules for filtering the request, send the request to the directory server with which the viewport is associated.

### Claim 15 (depends on 14)

The computer program product of claim 14, wherein the computer readable program further causes the computing device to:
responsive to no valid operation remaining in the request after applying the specific filtering rules for filtering the request, return an error message to the client application.

### Claim 16

An apparatus, comprising:
a processor; and
a memory coupled to the processor, wherein the memory comprises instructions which, when executed by the processor, cause the processor to:
configure a viewport server with filtering rules for responses from a directory server, wherein the responses are generated to fulfill requests from a client application and wherein the filtering rules determine which data is to be forwarded to the client application;
intercept one or more responses from the directory server to the client application;
filter the one or more intercepted responses according to the filtering rules to produce a set of filtered responses; and
send the set of filtered responses to the client application.

### Claim 17 (depends on 16)

The apparatus of claim 16, wherein the filtering rules further comprise filtering rules for the requests.

### Claim 18 (depends on 17)

The apparatus of claim 17, wherein the instructions further cause the processor to:
determine if the request from the client application meets the filtering rules for the requests; and
responsive to the request meeting the filtering rules for requests, directly send the request to the directory server.

### Claim 19 (depends on 18)

The apparatus of claim 18, wherein the instructions further cause the processor to:
responsive to the request failing to meet the filtering rules for requests, filter the request based on specific filtering rules for filtering the request;
determine if at least one valid operation remains in the request after applying the specific filtering rules for filtering the request; and
responsive to a valid operation remaining in the request after applying the specific filtering rules for filtering the request, send the request to the directory server with which the viewport is associated.

### Claim 20 (depends on 19)

The apparatus of claim 19, wherein the instructions further cause the processor to:
responsive to no valid operation remaining in the request after applying the specific filtering rules for filtering the request, return an error message to the client application.