Extendible access control for lightweight directory access protocol
AssigneeInternational Business Machines Corporation
InventorsMartin A. Ambrosini, Wendi L. Nusbickel, Brian E. Yoder
Life of this patent
Estimating the term…
Abstract
A method and system for providing access control using Lightweight Directory Access Protocol (LDAP). The method can include a series of steps which can include receiving from a user an LDAP operation directed to an LDAP search engine. The method can include associating the user with an access control group and reformatting the LDAP operation based on the access control group. Additionally, the step of providing the reformatted LDAP operation to the LDAP search engine can be included.
Claims6
An access control method comprising:
- receiving from a user a Lightweight Directory Access Protocol (LDAP) operation directed to an LDAP search engine;
- determining an access control group associated with said user;
- reformatting said LDAP operation based on said access control group by including one or more application specific parameters in said LDAP operation, said application specific parameters corresponding to said access control group, wherein said application specific parameters correspond to parameters of a directory service;
- and,
- providing said reformatted LDAP operation to said LDAP search engine.
A machine readable storage, having stored thereon a computer program having a plurality of code sections executable by a machine for causing the machine to perform the steps of:
- receiving from a user an LDAP operation directed to an LDAP search engine;
- determining an access control group associated with said user;
- reformatting said LDAP operation based on said access control group, including one or more application specific parameters in said LDAP operation, said application specific parameters corresponding to said access control group, wherein said application specific parameters correspond to parameters of a directory service, and,
- providing said reformatted LDAP operation to said LDAP search engine.
Dependencies are inferred from the claim text.