Patent ID: 8347347
Filing Date: 2013-01-01
Classification: H04L

Abstract:
1. A computer implemented method for password policy enforcement in a distributed directory when policy information is distributed, the computer implemented method comprising: operating a proxy server to establish connections to each of a plurality of backend directory servers; responsive to providing a request from a client to a given backend directory server, performing a series of lightweight directory access protocol (LDAP) operations on a targeted set of backend directory servers to collect password policy information applicable to a target user, wherein the targeted set of backend directory servers comprises at least a first backend directory server and a second backend directory server, the password policy information applicable to the target user is partitioned and distributed across the targeted set of backend directory servers, and wherein performing the series of LDAP operations to collect password policy information includes collecting a first password policy information portion from the first backend directory server, and collecting a second password policy information portion from the second backend directory server; responsive to collecting the password policy information applicable to the target user, operating the proxy server to evaluate the collected password policy information to determine an effective password policy for the target user; and sending the request and subsequent requests with the effective password policy from the proxy server to the given backend directory server.