Method and system for creating and utilizing managed roles in a directory system
AssigneeSun Microsystems, Inc.
InventorsDavid Boreham, Peter Rowley, Mark C. Smith
Life of this patent
Estimating the term…
Abstract
Role is a comprehensive grouping mechanism. In a client-server directory system, roles transfer some of the complexity to the directory server. A role is defined by its role definition entry. Any client with appropriate access privileges can discover, identify and examine any role definition. A “managed” role is one that can be configured to provide search results similar to those available with a static grouping mechanism, i.e., to create a group entry that contains a list of members. Managed roles allow a user to create an explicit enumerated list of members. A managed role is a label stored with a directory entry.
Claims16
A method of configuring a directory server comprising a plurality of target entries, said method comprising the steps of:
- creating a directory target entry comprising a computed attribute and a plurality of predefined attributes;
- designating a predefined attribute within said target entry;
- and
- assigning a distinguished name of a role to the predefined attribute.
A method of validating whether a target entry may possess a managed role, comprising the step of:
- accessing a target entry of a directory comprising predefined attributes and computed attributes;
- accessing a managed role of said directory comprising a DN;
- and
- verifying if said DN of the managed role is contained as a value in said predefined attributes.
An apparatus comprising:
- a directory server comprising:
- first component configured to store a plurality of target entries comprising computed attributes and predefined attributes;
- second component configured to designate a predefined attribute within a target entry;
- and
- third component to assign DN of a managed role to the predefined attribute.
An apparatus comprising:
- a directory server comprising:
- first component configured to store a plurality of target entries comprising computed attributes and predetermined attributes;
- second component configured to validate whether a target entry may possess a managed role, said second component comprising:
- third component configured to verify if DN of the managed role is contained as a value in a predefined attribute.
A system for providing service attribute information comprising:
- a directory server comprising a hierarchical data store associating a plurality of target entries with service attributes, said hierarchical data store comprising an organization level and a managed role level and further comprising attribute templates defined with respect to services and levels;
- in response to a query for a predefined service attribute associated with one of said plurality of target entries, an application for designating said predefined service attribute;
- and
- wherein said directory server, in response to said designating, assigns a distinguished name of said managed role to said predefined service attribute.
Dependencies are inferred from the claim text.