Abstract: The present invention provides a system and method for use within a computer network that allows for automated provisioning, configuration, and maintenance of the servers and other devices connected to a computer network in accordance with established policies. This system and method make use of templates which represent security polices which are applicable to all devices within the system, a subset of the devices, or a particular type of device. In addition, the template structure includes conditional statements which allows for flexibility in defining the policies.

Abstract: A directory server including a supplier server, a consumer server in communication with the supplier server, a plurality of pluggable services that manage replication of data contained within the directory server from the supplier server to the consumer server, and a change sequence number used to determine ordering of operations performed on the consumer server. Replication of data is managed using the change sequence number.

Abstract: A method of addressing an entry in a directory server including generating a unique identifier for the entry, creating an encoded address by encoding the unique identifier into a distinguished name, and specifying the entry using the encoded address for a plurality of operations. A method of addressing an entry in a directory server, including generating a unique identifier for the entry, creating an encoded address by encoding the unique identifier into a control, and specifying the entry using the encoded address for a plurality of operations. A unique identifier-based addressing system for a directory server, including a unique identifier generated for an entry and an encoded address created by encoding the unique identifier into a distinguished name. The entry is specified using the encoded address for a plurality of operations.

Abstract: A directory server includes a supplier server, a consumer server in communication with the supplier server, a plurality of pluggable services that manage replication of data contained within the directory server from the supplier server to the consumer server, and a change log maintained on the consumer server of data replicated to the consumer server. The replication of data is managed by the plurality of pluggable services using the change log.

Abstract: A directory server including a supplier server, a consumer server in communication with the supplier server, a plurality of pluggable services that manage replication of data contained within the directory server from the supplier server to the consumer server; and a replica update vector used to determine a minimal set of updates necessary to synchronize the consumer server with respect to the supplier server. Replication of data is managed using the replica update vector.

Abstract: A method of schema replication in a directory server including updating a schema at a replication supplier, computing a change sequence number, placing the change sequence number in an attribute on the replication supplier, initiating a replication session to a replication consumer, reading the change sequence number on the replication consumer, updating the schema on the replication consumer if the change sequence number on the replication consumer is less than the change sequence number on the replication supplier, and propagating a schema update from the replication supplier to each replication consumer.

Abstract: A method for resolving updates in a directory server including generating a change sequence number, creating a total ordering of operations by time using the change sequence number, extracting state information from an entry associated with an operation from the total ordering, and computing a new state for the entry using extracted state information and the operation associated with the entry.

Abstract: A directory server including a supplier server, a consumer server in communication with the supplier server, a plurality of pluggable services that manage replication of data contained within the directory server from the supplier server to the consumer server, and a change sequence number used to determine ordering of operations performed on the consumer server. Replication of data is managed using the change sequence number.

Abstract: A directory server includes a supplier server, a consumer server in communication with the supplier server, a plurality of pluggable services that manage replication of data contained within the directory server from the supplier server to the consumer server, and a change log maintained on the consumer server of data replicated to the consumer server. The replication of data is managed by the plurality of pluggable services using the change log.

Abstract: A method of addressing an entry in a directory server including generating a unique identifier for the entry, creating an encoded address by encoding the unique identifier into a distinguished name, and specifying the entry using the encoded address for a plurality of operations. A method of addressing an entry in a directory server, including generating a unique identifier for the entry, creating an encoded address by encoding the unique identifier into a control, and specifying the entry using the encoded address for a plurality of operations. A unique identifier-based addressing system for a directory server, including a unique identifier generated for an entry and an encoded address created by encoding the unique identifier into a distinguished name. The entry is specified using the encoded address for a plurality of operations.

Abstract: A method of fractional replication in a directory server includes determining a fractional portion of an entry stored on a primary server using a replication agreement, replicating the fractional portion from the primary server to a replica server creating a fractional replica, and connecting a client computer to the fractional replica. The client computer has knowledge of only the fractional replica.

Abstract: The present invention provides a system and method for use within a computer network that allows for automated provisioning, configuration, and maintenance of the servers and other devices connected to a computer network in accordance with established policies. This system and method make use of templates which represent security polices which are applicable to all devices within the system, a subset of the devices, or a particular type of device. In addition, the template structure includes conditional statements which allows for flexibility in defining the policies.