Abstract: Role is a comprehensive grouping mechanism. In a client-server directory system, roles transfer some of the complexity to the directory server. A role is defined by its role definition entry. Any client with appropriate access privileges can discover, identify and examine any role definition. A “managed” role is one that can be configured to provide search results similar to those available with a static grouping mechanism, i.e., to create a group entry that contains a list of members. Managed roles allow a user to create an explicit enumerated list of members. A managed role is a label stored with a directory entry.

Abstract: Class of Service (CoS) is a mechanism that allows a user to share attributes between directory entries in a way transparent to an application. A CoS scheme includes a CoS Definition entry and a CoS Template entry. These two entries interact to provide attribute values to target entries within their CoS “scope”. In Classic CoS, an attribute-value pair is matched with a target entry based on the target entry's DN. The CoS Definition entry, which is stored as an LDAP subentry below the branch at which it is effective, identifies the type of CoS being used. The Template entry contains a list of attribute values that are shared. Any change made to the template entry's attribute values is automatically applied to all entries that share the attribute.

Abstract: The present disclosure is directed toward nesting of roles in a directory system. A nested role is a container of other roles. To nest, the DNs corresponding to the roles are added or encapsulated to form the nested role. A “nested” role can be configured to provide additional level of abstraction by nesting different role types—filtered, managed, enumerated or nested—whereby an entry can be a member of any one of the roles in the nesting. Nested roles allow a user to create roles that contain other roles. A nested role can be created with no members nested. Alternatively, a nested role may contain one or more members. The nesting or encapsulation is performed if (1) the target entry is within the scope of the role; and/or (2) target entry is within the scope of the role that causes the target entry to possess the nested role.

Abstract: Class of Service (CoS) is a mechanism that allows a user to share attributes between directory entries in a way transparent to an application. A CoS scheme includes a CoS Definition entry and a CoS Template entry. These two entries interact to provide attribute values to target entries within their CoS “scope”. The CoS Definition entry, which is stored as an LDAP subentry below the branch at which it is effective, identifies the type of CoS being used. The Template entry contains a list of attribute values that are shared. Any change made to the template entry's attribute values is automatically applied to all entries that share the attribute. In the case of pointer CoS a template entry's corresponding attribute-value pair is matched using only a Template DN. There can be only one Template DN for each pointer CoS.

Abstract: Class of Service (CoS) is a mechanism that allows sharing attributes between directory entries in a way transparent to an application. An indirect CoS identifies a template entry using the value of one of the target entry's attributes. In Indirect CoS, template entries are not defined within the CoS Scheme along with the CoS Definition entry. A first target entry may indirectly use a second target entry as a template entry and take on the second target entry's attribute-value pairs. It should be noted, however, that the first target entry's CoS specifier attribute must contain the DN of an existing and valid second target entry. Thus, in indirect CoS, a DN-valued attribute in the first target entry points to a temporary template entry, which is the second target entry's attribute-value set. The value in the attribute-value pair, which represents the CoS specifier must be a DN and must point to a valid entry.

Abstract: Role is a comprehensive grouping mechanism used in a directory server. In a client-server directory system, roles transfer some of the complexity to the directory server. A role is defined by its role definition entry. Assigning entries to roles enables applications to locate the roles of a target entry, rather than select a group and browse the members list. By changing a role definition, a user can change an entire organization with ease. Any client with appropriate access privileges can discover, identify and examine any role definition.

Abstract: A venting device is provided for venting the interior of a blood culture bottle by passing the tip of a hollow needle through a sealing stopper of the bottle. The device includes a collapsible shield for shielding the needle, a needle support in the vicinity of one end of the shield for holding the needle and incorporating a vent passage providing fluid communication between the hollow interior of the needle and the atmosphere, and a detachable sterilizing cap on the other end of the shield. The two ends of the shield are reciprocable relative to one another in the direction of the length of the needle against the action of a compression spring. Venting of the bottle is effected by placing the end of the shield against the sealing stopper with the shield in an extended condition, and applying pressure to the device in a direction towards the sealing stopper.

Abstract: An instrument pick and finger attachment includes a finger ring for wearing upon a user's finger together with a generally planar pick for strumming a stringed instrument. The pick is joined to the finger ring by a flexible chain via a pair of separable couplers at each end. The separable couplers facilitate the replacement or substitution of different components within the combination.