Patent ID: 7725500
Filing Date: 2010-05-25
Classification: G06F

Abstract:
1. A computer-implemented method of a Lightweight Directory Access Protocol (LDAP) directory server for managing an LDAP directory, the method comprising: defining a role in the LDAP directory, the role identified by a first distinguished name and represented by a node outside of an organization unit subtree in the LDAP directory; defining a role attribute for at least one of a plurality of entries in the LDAP directory, the role attribute identified by the first distinguished name of the role; defining a role-based group at a group management module of the directory server, the role-based group represented by the organization unit subtree and identified by a second distinguished name, a definition of the role-based group comprising the first distinguished name of the role and the second distinguished name of the role-based group, wherein an entry is a member of the role-based group based on the entry possessing the role attribute; and automatically updating membership of the role-based group when an entry loses the role in the LDAP directory; determining which of the plurality of entries are members of the role-based group by querying the role attribute of the plurality of entries; and providing the entries that possess the role attribute to a client as the members of the role-based group.