Abstract: The present invention provides a change log handler than can accommodate a change log having an entry that includes more than one modification operation or multi-valued attributes. The change log handler typically includes a change parser for parsing change attributes corresponding to the change log that identify changes to the first data source. Such changes can include a plurality of modification operations as reflected in a single entry of the change log. The change log handler also includes a change reflector for applying the changes to a second data source.

Abstract: Authenticating a first user in a protected network to an application in a DMZ network shared simultaneously with a second user in an unprotected network. The first user supplies a userID and a password to a first server within the protected network for authentication for the application. The first sewer checks authentication of the first user based on the userID and password. If the first user is authentic, the first server forwards to the application an authentication key for the first user and a selection by the first user pertaining to the application. The application checks authentication of the key, and if authentic, complies with the selection by the first user. The second user supplies another userID and another password to the application. If the other userID and other password are authentic, the application complies with a selection made by the second user pertaining to the application.

Abstract: A method and system for measuring performance and balancing workload of sites and servers is provided. The method comprises measuring performance of one or more servers located at different sites of the network and computing a performance metric for each of the sites or one or more servers at each of the sites. The method further comprises providing a bias to the performance metric and routing a request to one of the different sites or one of the one or more servers based on the biased performance metric.

Abstract: A method for monitoring a plurality of servers in a cluster and taking corrective action for the servers. A request to one of the servers is sent. Then, a determination is made if the one server successfully handles the request and how long it took for the one server to handle the request. If a response is received indicating that the one server successfully handled the request, but it took the one server longer than a predetermined time period to handle the request, a dispatcher for the one server is notified to reduce, but not eliminate, a workload of the one server. There is specified a number of consecutive requests that can be sent to a server and not handled by the server within a specified time period for each of the requests; the number indicates that the server is down. A request is sent to one of the servers, and a determination is made that the one server did not successfully handle the request within the specified time period.

Abstract: A method for authenticating a first user in a protected network to an application in a DMZ network shared simultaneously with a second user in an unprotected network. The protected network and the DMZ network are both controlled by a same entity. The first user supplies a userID and a password to a first server within the protected network for authentication for the application. The first server checks authentication of the first user based on the userID and password. If the first user is authentic, the first server forwards to the application an authentication key for the first user and a selection by the first user pertaining to the application. The application checks authentication of the key, and if authentic, complies with the selection by the first user. The second user supplies another userID and another password to the application. If the other userID and other password are authentic, the application complies with a selection made by the second user pertaining to the application.

Abstract: An apparatus and method provides directory service to software applications throughout an enterprise. Directory entries are kept in a data store. A web server having one or more API's is coupled to the data store. The web server may have an API locator for selecting an appropriate API. An enterprise software application such as a purchasing or accounts payable transaction requests directory information by sending a query to an appropriate wrapper based on the programming language, protocol or format of the application. The wrapper sends the request to the appropriate API which then sends a request to the data store. A directory entry is received and returned to the enterprise.