Patent ID: 8935805
Filing Date: 2015-01-13
Classification: H04L

Abstract:
1. A method for enforcing password policy within a distributed directory that includes a set of directory servers, and a proxy server that acts as an intermediary between a client and the set of directory servers, comprising: at the proxy server, receiving and parsing a password policy response control, the password policy response control returned from a given one of the directory servers in response to receipt at the directory server of a password policy request control passed to the directory server from the proxy server, the password policy request control requesting notification of one or more password policy conditions that are enforced at the directory server, and the password policy response control identifying when any of the one or more of the password policy conditions are present at the directory server; at the proxy server, storing given information obtained from the parsing step to facilitate policy enforcement at the proxy server upon any subsequent receipt at the proxy server of a password policy request control, wherein the given information is state information that is cached at the proxy server for a time period associated with a given connection between the client and the proxy server; forwarding the password policy response control from the proxy server to the client; and upon the subsequent receipt of the password policy request control, enforcing policy at the proxy server instead of the directory server using the given information stored.