Abstract: A computer implemented method, data processing system, and computer program product for allowing users with minimal database skills to produce efficient, extended configuration management databases. Input is received from a user to extend a configuration management database, wherein the input includes a generic data type. The generic data type is mapped to a database data type of the configuration management database. An SQL statement is then generated to create the database data type in the configuration management database. Responsive to a successful execution of the SQL statement, the tables in the configuration management database are updated with the database data type to reduce a number of tables created for the database data type.

Abstract: Computer implemented method, system and computer usable program code for processing a data object, for example, for searching for, creating or updating a data object. A computer implemented method for processing a data object includes receiving a request for the data object. A static portion and a dynamic portion for the data object are determined, and an instruction for the static portion and an instruction for the dynamic portion are processed separately. To search for a data object, a result from processing an instruction for the static portion and a result from processing the instruction for the dynamic portion are merged to form a hybrid data object. To create or update a data object, a result from processing an instruction for the static portion and a result from processing the instruction for the dynamic portion is saved in a database.

Abstract: A computer implemented method, data processing system, and computer program product for allowing users with minimal database skills to produce efficient, extended configuration management databases. Input is received from a user to extend a configuration management database, wherein the input includes a generic data type. The generic data type is mapped to a database data type of the configuration management database. An SQL statement is then generated to create the database data type in the configuration management database. Responsive to a successful execution of the SQL statement, the tables in the configuration management database are updated with the database data type to reduce a number of tables created for the database data type.

Abstract: A computer implemented method, data processing system, and computer program product for allowing users with minimal database skills to produce efficient, extended configuration management databases. Input is received from a user to extend a configuration management database, wherein the input includes a generic data type. The generic data type is mapped to a database data type of the configuration management database. An SQL statement is then generated to create the database data type in the configuration management database. Responsive to a successful execution of the SQL statement, the tables in the configuration management database are updated with the database data type to reduce a number of tables created for the database data type.

Abstract: A method in a data processing system for providing security to target passwords in a global sign on system centralized database. In a preferred embodiment, a target password is received by the global sign on system. The target password is encrypted in a user selected encryption manner to create an encrypted password. The encrypted password and an indication of encryption manner chosen is then stored in the centralized database.

Abstract: Computer implemented method, system and computer usable program code for processing a data object, for example, for searching for, creating or updating a data object. A computer implemented method for processing a data object includes receiving a request for the data object. A static portion and a dynamic portion for the data object are determined, and an instruction for the static portion and an instruction for the dynamic portion are processed separately. To search for a data object, a result from processing an instruction for the static portion and a result from processing the instruction for the dynamic portion are merged to form a hybrid data object. To create or update a data object, a result from processing an instruction for the static portion and a result from processing the instruction for the dynamic portion is saved in a database.

Abstract: A computer implemented method, apparatus, and computer program product for retrieving data. The process identifies a class type for the requested attribute data to form an identified class type in response to receiving a request for attribute data for a configuration item from a client. The process generates a set of data windows associated with the identified class type. Each data window in the set of data windows provides availability information for attribute data available from a remote data source. The process attribute data associated with each data window in the set of data windows to form a set of attribute data.

Abstract: A computer implemented method, apparatus, and computer usable program code for managing a database. Performance data is determined for the database. The performance data relies on a key of the database. A schema of the database is autonomically modified by making changes utilizing the performance data in response to determining the performance data.

Abstract: A computer implemented method, data processing system, and computer program product for allowing users with minimal database skills to produce efficient, extended configuration management databases. Input is received from a user to extend a configuration management database, wherein the input includes a generic data type. The generic data type is mapped to a database data type of the configuration management database. An SQL statement is then generated to create the database data type in the configuration management database. Responsive to a successful execution of the SQL statement, the tables in the configuration management database are updated with the database data type to reduce a number of tables created for the database data type.

Abstract: A method, program and system for authenticating LDAP referral searches are provided. The invention comprises receiving a bind request from a LDAP referred search request and then searching the local directory for an entry corresponding to the distinguished name (DN) of the bind request. If an entry for the bind DN is located within the local directory, the bind request is authenticated. If an entry for the bind DN is not found in the local directory, a defined reference server is checked for the prefix of the bind DN. If the prefix for the bind DN is located in the reference server, the reference server is contacted for authentication, which is performed using a root DN. If an entry for the bind DN is not found in either the local directory or reference server, the bind request cannot be authenticated and is denied.

Abstract: The present invention provides an improved method and system for unobtrusively achieving secure cross-platform access in a heterogeneous network environment. In a system aspect, the system includes a plurality of heterogeneous computer systems, at least two of the computer systems including a system specified user identification; and an enterprise directory service, the enterprise directory service being shared by the plurality of computer systems to provide for the formation of an enterprise group, the enterprise directory service including at least one enterprise user which is associated with system specified user identification from the at least two of the computer systems. The system in the network in accordance with the present invention may perform cooperative programming with other systems in the same enterprise group. Systems within the same enterprise group are allowed to define enterprise users between them.

Abstract: The present invention provides a method and system for providing cross-platform access to Internet users of a heterogeneous grouping of computers. In a system aspect, the system includes a plurality of heterogeneous computer systems, at least one of the plurality of computer systems including an Internet user identity; and an enterprise directory service, the enterprise directory service being shared by the plurality of computer systems, the enterprise directory including at least one enterprise role which is associated with the Internet user identity, the at least one enterprise role capable of being used to access the plurality of computer systems independently of any specific operating system user identification. By allowing enterprise roles to be defined independently of any specific operating system user identification, flexibility is injected into the network configuration and Internet user aggravation is reduced.

Abstract: A caching mechanism for a directory service having a backing store. According to the invention, directory search results are cached over a given data capture period, with the information then being used by a data analysis routine to generate a data access history for the user for a particular application. That history is then used to generate a recommended pre-fetch time, a filter key for the pre-fetch, and a preferred cache replacement policy (e.g., static or LRU). Based on that information, a control routine pre-fetches and populates the cache with information that is expected to be needed by the user as a result of that access history.

Abstract: An improved method, apparatus, and instructions for locating a server in a distributed network using the Lightweight Directory Access Protocol (LDAP), maintaining information for the server, displaying a tree of servers, browsing the tree of servers, and searching the tree of servers for an entry with specific attributes is provided. The information maintained about the server includes its location, lists of attributes, and access control. The tree displayed can be for all servers combined or for an individual server. The search can be across the entire server or customized to a subset of servers. The search can be based on one of the following attributes: user, country, group, locality, access group, access role, organization, organization unit, domain, or can be based on user defined attributes.

Abstract: A window locator is provided for finding a particular window among a plurality of windows running different applications or different instances of a single application. A linked list is maintained with parameters for each window open, whether active or minimized, and updated whenever a window is opened or closed, or when a new command. is started within a window. For each active or minimized window, the linked list contains: the command or application name being run or last typed within each window; the parameters, such as a filename or uniform resource locator, for the command or application; the current working directory for the command or application; and the times tamp-for the start of the command or application. In response to a user request specifying the command or application, name, parameters, or times tamp of the desired window, the window locator traverses the linked list and filters the entries for candidate windows utilizing the user-specified search criteria.

Abstract: A method, program and system for authenticating LDAP referral searches are provided. The invention comprises receiving a bind request from a LDAP referred search request and then searching the local directory for an entry corresponding to the distinguished name (DN) of the bind request. If an entry for the bind DN is located within the local directory, the bind request is authenticated. If an entry for the bind DN is not found in the local directory, a defined reference server is checked for the prefix of the bind DN. If the prefix for the bind DN is located in the reference server, the reference server is contacted for authentication, which is performed using a root DN. If an entry for the bind DN is not found in either the local directory or reference server, the bind request cannot be authenticated and is denied.