Abstract: A method for securing sparse access control list (ACL) data in a relational database used as a backing store for a hierarchical-based directory service. The sparse ACL data is secured in a plurality of tables. An owner table stores data objects with explicitly set ACLs. A propagation table stores data on whether individual ACLs are inherited by descendant objects. A permissions table stores data regarding permissions which a user may perform on an object. A source table stores data for a set of ancestor objects having respective ACLs for each of a set of descendant objects. Preferably, the tables are stored in the relational database together with the objects. For a given object, data in the tables is used to determine the given object's entry owner and ACL. The inventive technique has particular applicability in a Lightweight Directory Access Protocol (LDAP) directory service having a relational database as a backing store.

Abstract: A system and method is provided which allows users of an OSI mail handling system the advantage of communicating with users of other mail handling systems and utilizing the functionality associated with the OSI system. The functionality of a RFC-987 gateway is extended to provide, in addition to a straight conversion function, full OSI mail handling functions. A conventional mail handler is extended to allow for both OSI mail and conventional mail originating from a user of any mail system to be processed, thus providing a common interface for mail system users. Further, the sendmail component has now been enabled to recognize OSI addresses and route the associated messages to the appropriate destination. Mixed mode addressing has also been extended to include OSI type addresses in an address string that may contain components from several different networks, e.g. TCP/IP, UUCP.

Abstract: In the remote trusted path invention, secure systems may provide a mechanism for the user to establish a trusted path for direct communication with the system's trusted computing base for security-critical operations. This invention allows users to request such a trusted path from remote systems using a new TELNET option and command, in a system-independent, confirmed, backward-compatible manner. It also describes how to implement remote support for such a trusted path in systems which use a Secure Attention Key mechanism such as Secure AIX.