Online LDAP Entry Relocation via LockEntry and Proxy Mediation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In distributed directory environments, relocating LDAP entries and subtrees across partition servers typically requires manual intervention and can result in server downtime, as existing methods do not support online relocation without bringing servers down.
Innovation Solution
A method for automatically relocating LDAP entries and subtrees from one backend partition server to another by creating equivalent entries with modified distinguished names on a target server, using 'lockEntry' extended operations to manage locking and updating, and dynamic configuration updates to activate new suffix subtrees, allowing for online relocation without server downtime.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Extent of automation
If manual relocation methods are used for LDAP entries across partition servers, then relocation can be performed, but server downtime is required and manual intervention is needed
Solution Approach 1:
The patent applies preliminary action by creating equivalent LDAP entries in the target partition server before deleting the original entries from the source server. This ensures that the directory service remains operational throughout the relocation process, eliminating server downtime while achieving automatic relocation of LDAP entries and subtrees across partition servers.
2Reliability
If online relocation is implemented to avoid server downtime, then service continuity is maintained, but complex locking and configuration management is required
Solution Approach 1:
The patent implements feedback mechanisms through extended operations that provide locking and notification capabilities. The lockEntry extended operation allows the system to acquire locks on LDAP entries during relocation, while the notify extended operation enables asynchronous notifications to clients about configuration changes. This feedback-based approach manages the complexity of online relocation while maintaining service continuity.
Solution Approach 2:
The patent uses an intermediary approach by introducing a proxy server that mediates between LDAP clients and partition servers. The proxy server handles the complexity of lock management and configuration updates, allowing partition servers to perform relocation operations without directly impacting client connections. This intermediary layer simplifies the overall system complexity while enabling reliable online relocation.
3Manufacturing precision
If equivalent entries are created with modified distinguished names, then schema compliance is maintained, but additional formatting and modification steps are required
Solution Approach 1:
The patent applies copying by creating equivalent LDAP entries in the target partition server that replicate the structure and attributes of the original entries. The distinguished names are modified to reflect the new location while maintaining the same attribute-value pairs and schema compliance. This copying approach ensures precision in maintaining schema requirements while the automated formatting process handles the complexity of entry modification.
Data Source
AI summary
A method for online automatic relocation of LDAP entries and subtrees in a distributed directory environment. The online relocation method is for homogeneous LDAP directory partition servers where source and target partition servers have the same schema rules and definitions. When the method is to be applied in a directory environment where servers have different set of schema, then a “rules file” or a “policies file” that contains mapping of schema attribute-value pairs and objectclasses of a source directory server with the schema attribute-value pairs and objectclasses of a destination directory server should be supplied to the relocation tool.