Patent ID: 8042153

Claim:
A computer implemented method for reducing overhead associated with password policy enforcement operations in a distributed directory using a proxy server, the computer implemented method comprising: by a proxy server, establishing connections to backend directory servers, wherein establishing the connections to the backend directory servers comprises: requesting a portion of a password policy for a client from each of the backend directory servers, wherein the password policy is a set of security requirements for a password of a user of the client; and generating, by the proxy server, an effective password policy for the client using each portion of the password policy; while providing a subsequent request from the client to one of the backend directory server, wherein the client is a bound client to the proxy server, the proxy server determining whether a password policy check is required to be performed at the backend directory server; and responsive to determining that the password policy check is not required to be performed at the backend directory server, sending the client request together with a skip password policy control to the backend directory server, wherein the skip password policy control informs the backend directory server to skip the password policy check on the client request.