Abstract: Virtual attribute logic adds virtual attributes to a Lightweight Directory Access Protocol (“LDAP”) response, and meta-virtual attribute logic adds additional virtual attributes to provide further information about the virtual attributes. For example, a Distinguished Name (“DN”) of an entry that provided a virtual attribute may be added by the meta-virtual attribute logic.

Abstract: A method and apparatus for retrieving data from a Lightweight Directory Access Protocol (LDAP) repository. In one embodiment, the method includes receiving a request for data in a lightweight directory access protocol (LDAP) directory. The method may further include checking any one or more of an LDAP cache and an LDAP index for an LDAP attribute pertaining to requested data, the checking comprising determining if a time-to-live for the LDAP attribute or the LDAP index has expired, and returning the data to the client.

Abstract: Some embodiments of zero knowledge attribute storage and retrieval have been presented. In one embodiment, the content of a piece of data is encrypted at a client machine. Further, an identifier of the piece of data is hashed at the client machine. The encrypted content and the hashed identifier may be stored in a database maintained by a server without disclosing the content of the data to the server.

Abstract: A method and apparatus for ordering callbacks for server plug-ins of a Lightweight Directory Access Protocol (LDAP) directory server. Each plug-in registers with the LDAP server and has a designated priority and set of dependencies. The priority and dependency data are stored in an LDAP callback configuration entry or set of entries. The LDAP server analyzes the priority and dependencies to determine the order of each plug-in or individual callback relative to one another. This allows the LDAP directory server and LDAP operations to rely on the order of callbacks thereby improving the efficiency of the system.

Abstract: A distributed database server receives a recursive lock/search request, acquires a local lock, and propagates the recursive lock/search request to a peer database server. Specific implementations within a Lightweight Directory Access Protocol (“LDAP”) server are described, and applications that can benefit from the recursive locking and searching functionality are discussed.

Abstract: Alternative views for a selected distinguished name entry in current view are identified through subviews. Each subview corresponds to an attribute defined by a dynamic view object in a schema for a lightweight directory access protocol directory. The subviews are searched to find those that have entries that match the value of the selected distinguished name entry. In one aspect, the attribute is a virtual attribute.

Abstract: Template entries are added to a Lightweight Directory Access Protocol (“LDAP”)-accessible database, containing attributes that affect new records added to the database, attributes returned in response to an LDAP query, and records identified through an LDAP search operation. Static and dynamic attributes are discussed.

Abstract: A method and apparatus for secure information transfer using dedicated public key pairs for articles of information. A first public key pair may be generated for an article of information. The article of information may be combined with a first public key from the first public key pair to form an information packet. The information packet may be digitally signed with a second private key from a second private key pair.

Abstract: A method and apparatus for applying access control instructions to attributes. A request is received for permission to perform an operation on an attribute associated with an access control instruction. The access control instruction specifies an allowed type of channel for the operation. If a secure channel has been established with the requester, the permission to perform the action is granted.

Abstract: A method, an apparatus, and a system for managing data using state transition controlled attributes have been presented. For example, a workflow management policy and a set of states are defined at a server coupled to one or more client machines, each of the states corresponding to a distinct value of a set of values of an attribute of data. The method may further include implementing a state machine on the server to manage state transitions initiated by the one or more client machines operating on the data according to the workflow management policy.

Abstract: A method and apparatus for retrieving data from a Lightweight Directory Access Protocol (LDAP) repository. In one embodiment, the method includes retrieving a list of lightweight directory access protocol (LDAP) access control instructions (ACIs) for an LDAP entry, and storing the list in a cache of an LDAP server as an entry associated with the LDAP entry.

Abstract: Role is a comprehensive grouping mechanism. In a client-server directory system, roles transfer some of the complexity to the directory server. A role is defined by its role definition entry. Any client with appropriate access privileges can discover, identify and examine any role definition. A “managed” role is one that can be configured to provide search results similar to those available with a static grouping mechanism, i.e., to create a group entry that contains a list of members. Managed roles allow a user to create an explicit enumerated list of members. A managed role is a label stored with a directory entry.

Abstract: A method and apparatus for retrieving data from a Lightweight Directory Access Protocol (LDAP) repository. In one embodiment, the method includes receiving a request for at least one LDAP attribute value of an LDAP attribute, the LDAP attribute having a plurality of LDAP attribute values. The method may further include retrieving a first subset of the plurality of LDAP attribute values from an LDAP repository serially, and returning the first subset of the plurality of LDAP attribute values to a requester.

Abstract: A level for a hierarchical organizational chart is associated with a virtual attribute and the values for the level are generated from values for the virtual attribute. The organizational chart is derived from distinguished name entries in a lightweight directory access protocol directory and the virtual attribute is not associated with an object in a schema for the directory. The virtual attribute may be a virtual recursive attribute or a virtual reverse attribute.

Abstract: Subviews are generated for each unique value in a list of unique values for an attribute that is defined by a dynamic view object in a schema for a lightweight directory access protocol directory. The subviews are maintained by adding and deleting entries as the values for the attribute change. If a change in value causes the subview to have no entries, the subview is deleted.

Abstract: Values for virtual recursive attributes are generated for distinguished name entries in a lightweight directory access protocol directory by navigating through the directory tree starting at the distinguished name entry specified by an input value. An attribute list of the values for the virtual recursive attributes may be cached or indexed. In another aspect, attribute lists are generated for all branches of the directory tree.

Abstract: A method and apparatus for automatic index query optimization for a Lightweight directory Access Protocol (LDAP) system. Embodiments include a method for receiving a query for an LDAP repository. The method may further include reorganizing search terms in the query based on a uniqueness value of corresponding LDAP indexes to generate a modified query, and executing the modified query.

Abstract: A method and apparatus for maintaining indices for a Lightweight Directory Access Protocol (LDAP) repository. In one embodiment, the method includes receiving requests for data from a lightweight directory access protocol (LDAP) repository. The method further includes evaluating queries performed for the requests and generating an LDAP index based on an evaluated query.

Abstract: Values for virtual reverse attributes are generated for distinguished name entries in a lightweight directory access protocol directory by navigating through a list of distinguished name values for an input virtual recursive attribute. An attribute list of the values for the virtual reverse attributes may be cached or indexed. In another aspect, the list of distinguished name values for the inputer virtual recursive attribute is generated.

Abstract: Some embodiments of a smart card accessible over a personal area network have been presented. In one embodiment, an apparatus includes a wireless transceiver to communicatively couple to a personal area network (PAN) to receive an authentication request via the PAN from a device. The device may include a computer. The apparatus further includes a storage device to store a digital certificate that uniquely identifies a user. An authentication module in the apparatus may authenticate the user in response to an authentication request from the device using the digital certificate, wherein the user is allowed to access the computer upon authentication.