Abstract: A method and apparatus for managing a nested EXCEPTION role in a directory server is described. In one embodiment, a plurality of entries is defined in the directory server. At least one of the plurality of entries possesses a role. An entry is queried to determine its possessed role. A nested EXCEPTION role possesses at least two roles. An entry possesses the nested EXCEPTION role by possessing none of the roles within the nested EXCEPTION role.

Abstract: A method and apparatus for managing a nested AND role in a directory server is described. In one embodiment, a plurality of entries is defined in the directory server. At least one of the plurality of entries possesses a role. An entry is queried to determine its possessed role. A nested AND role possesses at least two roles. An entry possesses the nested AND role by possessing all the roles within the nested AND role.

Abstract: A method and apparatus for managing role based groups in a directory server is described. In one embodiment, a role attribute is defined for one or more entries in the directory server. A group of entries in the directory server is defined with a group role. The group role comprises one or more role attributes of one or more entries. The role attribute of the entries are queried to determine which entry possesses the group role. Entries that possess the group role are provided to the client.

Abstract: A method and apparatus for managing a nested XOR role in a directory server is described. In one embodiment, a plurality of entries is defined in the directory server. At least one of the plurality of entries possesses a role. An entry is queried to determine its possessed role. A nested XOR role possesses at least two roles. An entry possesses the nested XOR role by possessing only one of the roles within the nested XOR role.

Abstract: A method and apparatus for managing group based roles in a directory server is described. In one embodiment, a group of entries is defined in the directory server. One or more of the entries possess a group based role. The group based role points to one or more groups. Entries that belong to a group pointed by the group based role also possess the group based role.

Abstract: A method and apparatus for authenticating a client is described. In one embodiment, an identity provider server authenticates the client that is redirected from a relying party server. The identity provider server authenticates the client without receiving a replayable credential from the client. Upon authentication of the client, the identity provider server transmits a token of authentication to the client.

Abstract: A method and apparatus for managing log per entry in a directory server is described. In one embodiment, the directory server receives a request to operate on an entry in the directory server. The directory server operates on the entry. The information of the operation on the entry is stored in a log attribute of the entry.

Abstract: A method and apparatus for managing a directory server is described. In one embodiment, a value of an attribute of an entry in the directory server is received. The value of the attribute identifies a group. The entry is added to a group based on the value of the attribute. A content of the group is dynamically changed based on the value of the attribute of the entry.

Abstract: A method and apparatus for managing groups in a directory server is described. In one embodiment, in response to a request for accessing a static group, an action represented by an attribute of an entry of the directory server is dynamically performed. A result of the action is returned as part of a response of the static group.

Abstract: A method and apparatus for maintaining referential integrity in a plurality of directory servers is described. In one embodiment, a first directory server receives a request to operate on an entry in the first directory server. The request is serially repeated in at least one other directory server if the operation on the entry in the first directory server is not valid. The at least one other directory server communicates indirectly with the first directly server.

Abstract: A method and apparatus for managing groups in a directory server is described. In one embodiment, an addition of an identifier of a group to an entry in the directory server is received. A value of an attribute in the entry is updated with the identifier of the group. A content of the group is dynamically changed based on the addition of the identifier of the group to the entry in the directory server.

Abstract: The invention relates to an apparatus for heating an electrically conductive fluid, such as potable water, and to a method of heating the same. The heating apparatus includes a plurality of electrodes in an array, and a controller for selectively energizing the plurality of electrodes, in different combinations, to thereby adjust the electrical resistance observed across the electrode array, in order to maximize the current drawn by the apparatus.

Abstract: An x-ray system for use with image-guided medical procedures is programmed to move in a first scan path to acquire cone beam attenuation data from which a three-dimensional digital subtraction angiogram of selected vasculature is reconstructed. The x-ray system is also programmed to move in a second scan path to acquire a series of tomosynthesis images during the inflow of a contrast agent into the selected vasculature. Parametric images are produced from information in the tomosynthesis images which indicate blood perfusion physiology of the tissues served by the vasculature.