Patent ID: 8606832

Claim:
A method comprising: configuring a Lightweight Directory Access Protocol (LDAP) directory comprising a first LDAP node and a second LDAP node, the first LDAP node comprising one or more group entries each representing a group, wherein the group is a static group, and the second LDAP node comprising one or more individual data entries in a directory, each of the individual data entries in the second LDAP node being associated with one or more group entries of the first LDAP node via a membership attribute; receiving an identifier of groups; receiving a change request to change a first value of the membership attribute of a particular individual data entry in the second LDAP node to a second value, wherein the first value and the second value are identifiers of the groups; determining whether the first LDAP node contains a group entry in the one or more group entries that matches the second value of the membership attribute for the particular individual data entry; associating the particular individual data entry with the group entry that matches the second value based on a determination that the first LDAP node contains a matching group entry; creating a new group entry in the first LDAP node using the second value of the membership attribute from the change request based on a determination that the first LDAP node does not contain a matching group entry; changing content of the new group in view of the identifier of the group, wherein the second value of the membership attribute designated for indicating LDAP group membership of the particular individual data entry is an identifier of the new group entry; determining, by a processing device, whether the one or more group entries is not associated with any of the one or more individual data entries via the membership attribute; and deleting the one or more group entries that are not associated with any of the one or more individual data entries via the membership attribute.