Patent ID: 7904474
Filing Date: 2011-03-08
Classification: G06F,H04L

Abstract:
1. A method comprising: maintaining, by a lightweight directory access protocol (LDAP) server, a cache storing a plurality of attributes in association with respective LDAP entries, the plurality of attributes representing access control instructions (ACIs) applicable to corresponding LDAP entries; receiving a first request pertaining to a first LDAP entry; determining that the cache does not store ACIs applicable to the first LDAP entry; obtaining a list of ACIs that apply to the first LDAP entry, wherein the obtaining comprises traversing an LDAP repository tree to determine which ACIs are applicable to the first LDAP entry; controlling access to the first LDAP entry by a requester using the ACI list; storing the ACI list in the cache of the LDAP server in association with the first LDAP entry; and when processing a second request pertaining to the first LDAP entry, controlling access to the first LDAP entry by a requester using the ACI list in the cache without traversing the LDAP repository tree.