Search

In this chapter, we cover a series of use cases for specific configurations of MongoDB in production, such as hybrid on-prem/cloud clusters, low-latency applications, using an LDAP pool for authentication, and how to store large binary files.

In today’s world for each and every one, the data is very important factor or data plays a very important role. The concept of computer data is coming from the eighteenth century, and in nineteenth, computer data is very important concept. In nineteenth most of the devices are having the data storage capability. So, this data storage capability leads the computer to invent various protocols. The protocol is the special set of rules that are used to access the data, to exchange the data and to communicate between various notes of computer. Mainly data is stored in databases or in directory servers in computer. The protocols are also used to compress the data, to notify the data sending device that data sending is over and to notify the receiving data device that data receiving is over. Depending upon the operation, protocols are classified into various types. Protocols are fallen under the Open Systems Interconnection (OSI) models. It consists of various layers and various protocols. Depending upon the use and application, protocols are used.

This study inspects the capability of LDAP in improving the performance of query operation in the trading service. Thus, an experiment is conducted to distinguish the performance result gained from a trading service which uses LDAP with a trading service that uses relational database as its backend storage. From the outcome of the experiment conducted, we verified that a trading service that use LDAP provide a better performance as compared to a trading service that relational database.

This paper focuses on attribute-based access control (ABAC) in distributed automation and control systems. ABAC policies execute authorization decisions based on user information, object information and environment conditions. The proposed security system uses attribute certificates to represent both subject and object attributes and an LDAP server to store and distribute attribute certificates. This approach adapts concepts of credential management for subjects and uses the same mechanism for both subject and object management. An attribute management system provides an interface to edit and view both subject and object information. Certificate Revocation Lists (CRLs) exist for both types of attribute certificates. The entities of the distributed access control system implement synchronization mechanisms to keep local information up-to-date.

Database objects access by users has always been controlled in individual database or through enterprise authentication system like LDAP. In the event of abnormal usage, there is no way to detect nor remedial the situation. This paper proposes a novel data mining based method that increases the database security through intrusion detection and denial, and centrally controls the object access privilege of users across multitude of databases.

How to coordinate heterogeneous database to realize sharing and consistency of information not only is an important research subject in the database filed, but also is an emerging research hot spot in the field of database system. As a new development direction of computer software, it applies some new techniques to integrate the existing systems to develop new applications. The paper analyzes CSCW, XML, JDBC and heterogeneous database, and proposes a solution of heterogeneous database. The solution absorbs the thoughts of database meta data, middle ware and LDAP directory service.

The users and permission management functions of multiple application system will increase management complexity, reduce the convenience of users using.Analyze the module features of application system , LDAP technology , XML and RBAC technologies,etc. to build a permission centralized control system and combine with configuration file to solve the docking problems between various application systems and control systems.The system achieve unified management of users, permissions, application modules and access control and improve management efficiency and user experience.

In this paper, resource registry and management framework based on LDAP is proposed. The function, external interface and internal structure of the framework are firstly introduced. Then, the data naming, data model, data operation, security mechanism and advantages of LDAP are introduced in detail. At last, a typical application based on the framework is proposed. The framework provides a better way to manage resource and achieve resource sharing.

Unprecedentedly a massive number of devices are getting connected in the coming era of the Internet of Things (IoT). For discovery, remote access and management of these IoT devices, an IoT directory service is needed to store and provide their various attributes such as location, generated data types, owner's name, and security keys. In this paper, we present the architectural design of the IoT directory service that is capable to store a huge number of heterogeneous records and provide fast lookup (latency of few milliseconds) and dynamic update (latency of few seconds), while fully complying with owner- or user-centric security and privacy policy. To meet the performance requirements despite fluctuations in the workload and networking environment, we leverage tools of network function and resource virtualization to dynamically allocate and adjust the computational and network resources assigned to the directory service.

To preserve privacy has been a difficult problem in designing secure cloud storage system. In existing cloud storage systems, the privacy protection of user file directories is ignored while the privacy protection of files is focused on. A privacy-preserving method of creation file directory in cloud storage systems is proposed in this paper. This method makes cloud service providers can't identify the file directory of any user which is stored on cloud servers. It also solves the consistency of the directory tree file storage through client memory caching file directory and solves the integrity of the storage through keeping up the atomicity of directory tree file operations.

According ad grid computer by application, Grid computer security has be valued more and more. LDAP is a information catalogue, it defined customer and group just one, that can commonly shared it with machine and application program too many. This paper is defined group and user object to accomplish with the user code and legal power, thereby control that encryption and permission by C/S.

At present, massive amounts of data are distributed across different institutions, departments and scientific research institutes, and even at one site can be stored in heterogeneous storage systems. Therefore, it is hard to get the desired information from the massive data resource, which leads to the requirement of data sharing. In an effort to solve this problem, this paper studies Grid technology and RLS, for sharing remote sensing data. Furthermore, a resource directory service has been designed and implemented by using RLS in the Grid environment.

Problem statement: Service Oriented Architecture (SOA) defines how to integrate widely disparate applications for a world that is Web based and uses multiple implementation platforms. Using (SOA) one can build durable e-learning contents, regardless of changes or evolutions in technology. This means that new content should be added to existing content without costly redesign, reconfiguration, or recoding. Approach: In this study an e-Learning management system with Web services oriented framework was proposed. The system will be an open source application with client-scripting facility. It also supports the cross browser and it is fully integrated with different databases; MS SQL Server, MS Access, Oracle and LDAP. Results: The key values of Interoperability, durability, compatibility, manageability, dynamic reusability and accessibility in the proposed architecture enhance the future e-Learning systems to communicate more efficiently and share data more easily. Conclusion/Recommendations: Web services architecture will provide a standard based platform for Service-Oriented Computing. It defines itself as a set of specifications that support an open XML-based platform for description, discovery, and interoperability of distributed, heterogeneous applications as services.

The increase in the number of databases accessed only by some applications has made code injection attacks an important threat to almost any current system. If one of these applications accepts inputs from a client and executes these inputs without first validating them, the attackers are free to execute their own queries and therefore, to extract, modify or delete the content of the database associated to the application. In this paper a deep analysis of the LDAP injection techniques is presented. Furthermore, a clear distinction between classic and blind injection techniques is made.

It is critical to be able to visualize what is going on in Scientific research center project, as in this type of center, there is a large volume, variety, velocity of data. This type of large data is not handling by traditional project monitoring system OASIS (On-line Access to project Information System). Hence required modified version of OASIS monitoring system that can manage a huge amount of data and easily handle all type of data like (structure, un-structure and semi-structure data). This modified system work on the non-relational database as well as relational database. This paper deals with modified version of OASIS monitoring system which is known as the PMSBD (Project Monitoring System for Big Data). Here modification is done on the back-end of OASIS monitoring system. This software is PMSBD, a web-based comprehensive Project Monitoring Software that works without any problem on a huge amount of data with the help of Hadoop, also handle relational and non-relational database with the help of HBase, Hive, and Sqoop. It provides the analysis, searching, and computational process through Hadoop MapReduce. The software will be used by all project coordinators and sub-coordinators on RRCAT Intranet to efficiently monitor the projects. The software will be used for the preparation of various budget related and progress reports which are presently being prepared manually by the project coordinators. The system will be an authenticated system with LDAP based authentication for restricted use only by authorized users.

Oracle offers multiple options for Lightweight Directory Access Protocol (LDAP) data storage. Oracle Internet Directory (OID) and Oracle Unified Directory (OUD) both provide storage, and Oracle Virtual Directory (OVD) allows multiple disparate LDAP stores to be presented as a single source.

Oracle Internet Directory (OID) has been installed, and is populated with users from Active Directory. You have configured a synchronization process to ensure account information changes in Active Directory are populated to OID. The benefit to this is that all applications that use OID for authentication and role information continually have the latest user information. Fusion Middleware applications and other Lightweight Directory Access Protocol (LDAP) compatible applications can be configured to authenticate using OID. However, many organizations wish to build on this capability by providing a single sign-on (SSO) environment.

Service composition is a major challenge in an open environment populated by large numbers of heterogeneous services. In such a setting, the efficient interaction of directory-based service discovery with service composition engines is crucial. In this article we present a Java-based directory that offers special functionality enabling effective service composition. In order to optimize the interaction of the directory with different service composition algorithms exploiting application-specific heuristics, the directory supports user-defined selection and ranking functions written in a declarative query language. Inside the directory queries are transformed and compiled to JVM bytecode which is dynamically linked into the directory. The compiled query enables a best-first search of matching directory entries, efficiently pruning the search space.

If you need to glue together multiple technologies, such as databases, Lightweight Directory Access Protocol (LDAP), XML, messaging, Remote Procedure Calls (RPCs), and distributed objects, the Ruby programming language might be the answer to help you do it.

Representation components of user modeling servers have been traditionally based on simple file structures and database systems. We propose directory systems as an alternative, which offer numerous advantages over the more traditional approaches: international vendor-independent standardization, demonstrated performance and scalability, dynamic and transparent management of distributed information, built-in replication and synchronization, a rich number of pre-defined types of user information, and extensibility of the core representation language for new information types and for data types with associated semantics. Directories also allow for the virtual centralization of distributed user models and their selective centralized replication if better performance is needed. We present UMS, a user modeling server that is based on the Lightweight Directory Access Protocol (LDAP). UMS allows for the representation of different models (such as user and usage profiles, and system and service models), and for the attachment of arbitrary components that perform user modeling tasks upon these models. External clients such as user-adaptive applications can submit and retrieve information about users. We describe a simulation experiment to test the runtime performance of this server, and present a theory of how the parameters of such an experiment can be derived from empirical web usage research. The results show that the performance of UMS meets the requirements of current small and medium websites already on very modest hardware platforms, and those of very large websites in an entry-level business server configuration.

Directory services facilitate access to information organized under a variety of frameworks and applications. The lightweight directory access protocol is a promising technology that provides access to directory information using a data structure similar to that of the X.500 protocol. IBM Tivoli, Novell, Sun, Oracle, Microsoft, and many other vendors feature LDAP-based implementations. The technology's increasing popularity is due both to its flexibility and its compatibility with existing applications.

We describe novel efficient techniques for the distributed evaluation of hierarchical aggregate selection queries over LDAP directory data, distributed across multiple autonomous directory servers. Such queries are useful for emerging applications like the directory enabled networks initiative. Our techniques follow the LDAP approach of distributed query evaluation by referrals, where each relevant server computes answers locally, and the LDAP client coordinates between directory servers. We make a conceptual separation between the identification of relevant servers and the distributed computation of answers. We focus on the challenging task of generating an efficient plan for evaluating hierarchical aggregate selection queries, which involves correlating directory entries across multiple servers. The key features of our plan are: 1) the network traffic consists of query answers, and auxiliary messages that depend only on the number of servers and the size of the query (not on the data size), 2) the coordination effort at the client is independent of the data size, and 3) potentially expensive server-to-server communication and coordination is avoided. We complement our analysis with experiments that show the robustness and scalability of our techniques for highly distributed directory query processing.

In the era of Big Data, one single directory can contain tens of thousands or even millions of files. Directory update methods employed by traditional POSIX-compliant file systems do not adapt well to wide-area network and could lead to large amount of unnecessary bandwidth consumption due to their full cache invalidation approaches. In traditional file systems, if there is a small fraction of changes in a directory (e.g. Renaming a file), the whole cache of the directory metadata must be discarded and a new copy will be obtained from server, resulting in poor performance in low bandwidth environment. In this paper, we propose a directory metadata update strategy, which partitions metadata into blocks, and only transfers modified block(s) over the network to reduce transmission time. We implement a proof-of-concept prototype using the FUSE user space file system to verify the effectiveness of our approach. Results show that for a directory with directory entries size of 5MB, update time for small changes in a directory can be roughly reduced by a factor of 20.

LDAP (Lightweight Directory Access Protocol) directories are being rapidly deployed on the web. They are currently used to store data like white pages information, user profiles, and network device descriptions. LDAP directories offer scalability advantages over current database technologies, as well as being more flexible. However, as users begin to use them for Directory Enabled Networking tasks such as provisioning network services, allocating resources, reporting, managing end-to-end security, and offering mobile users customized features that follow them, LDAP's limited functionality becomes a significant barrier to progress. For example, LDAP directories do not have active database functionality (i.e., triggers). However, triggers are necessary for monitoring changes to directories and taking appropriate actions, just as they are for databases. Such functionality is crucial to take full advantage of proposals such as the Directory Enabled Network (DEN) initiative. Currently, trigger functionality is non-standardized for LDAP and each vendor's solution is non-portable. We built the Lightweight Trigger Access Process (LTAP) gateway to provide a portable way to add triggers to a LDAP directory. We describe the trigger language, the gateway's implementation, as well as our experiences gained both during implementation and from our users. LTAP is currently being used in several projects. LTAP can be downloaded at http://ltap.bell-labs.com. Copyright © 2000 John Wiley & Sons, Ltd.

Researchers at the Program for Climate Model Diagnosis and Intercomparison has built a prototype data server and catalog system for accessing data sets generated by climate models. The output of a single climate model run might be large, on the order of hundreds of gigabytes stored in thousands of physical files. A number of modeling groups around the world produce and manage such data sets. Organizing, managing, and providing distributed access to this data is a significant challenge. Our prototype addresses this challenge using a variety of open-source software components and languages, including the Python language, the Medusa server, and Lightweight Directory Access Protocol (LDAP) directories.

LDAP (Lightweight Directory Access Protocol) is a technology that can provide directory services to a range of applications. Directory service, a critical part of distributed computing, is the central point where network services, security services, and applications can form an integrated distributed computing environment. The simplicity of LDAP enables users to store and retrieve data easily from the directory. Nevertheless, as the use of directory services becomes more widespread, directories will need to scale to support millions of entries and millions of user requests with subsecond predictable performance. LDAP directories can be implemented using various storage mechanisms such as flat files, b-trees, or databases. This paper discusses an implementation of LDAP that uses the IBM DATABASE 2TM relational database as the data store and query engine to meet the directory service requirements. Performance analysis is provided to show that a relational database can be used to successfully meet the performance and scale needs of an LDAP directory while remaining secure and competitive with other vendor implementations.

The X.500 standard specifies a distributed directory service designed to store information about people and objects associated with computer networks. Its API is geared towards retrieving information based on this application domain. Recently, a number of projects have used the directory in non-traditional ways. Such applications, however, are constrained by the X.500 information model and the limited functionality of its API. We describe a prototype system that allows users to view the information in a directory as relations, and to query the view using SQL. An analysis of the performance of the system is presented and possible optimizations are discussed.

Lightweight Directory Access Protocol (LDAP) is an IETF open standard to provide directory services in the network. LDAP is based on X.500 directory architecture, intended to provide directory services in Internet compatible environments. LDAP is used to provide directory services to applications ranging from e-mail systems to distributed system management tools. LDAP is becoming more and more popular with its wider usage in the Internet.This report on LDAP is based on a study of 60 selected patents on LDAP from US patent database. The objective of this article is to present the distribution of patents according to different features and functions of LDAP and to present the hot issues on LDAP for current and future inventions.

This article presents a new technique for implemening the kind of directory services that frequently occur in the design of network applications conforming to the C.C.I.T.T. X.500 recommendation. A directory service is an important part of a computer network because it implements some logical to physical address translation to allow user and machine mobility in the system. This service has a high availability requirement in that the normal functioning of network applications rely heavily on their ability to locate communicating parties in a flexible and dynamic environment. In this article, a technique for implementing directory services that satisfy this availability requirement is presented.

The X.500 Directory was originally designed to act as an electronic replacement for paper telephone directories. It is the authors' belief that X.500 has a vital role to play in the emergence of information as a global commodity. In this paper, we explain how the X.500 Directory satisfies its original design goal of providing a global directory infrastructure

Electronic Data Interchange (EDI) is the means by which companies exchange trade related documents between application processes in electronically processable form. The initial development of this technology has been hampered by a lack of accepted international standards. We outline three key standards-based technologies that can be used to achieve global open EDI. These are the EDIFACT document syntax rules, X.400 message handling systems and X.500 directory services. We discuss in detail how the X.500 Directory can be used as a powerful tool in allowing EDI to take place between companies without the necessity for prior agreement. In addition, we describe a mechanism by which the directory can be used to store product information that may be used by a purchaser in ordering electronically.

Information system is the backbone of any kind of a distributed Grid system. NorduGrid ARC was one of the first middlewares that came with a reliable and comprehensive information systemarchitecture. This solution, initially inspired by an LDAP-based approach of Globus, has beenused as a distributed dynamic database for Grid resource discovery and monitoring in researchinfrastructures for many years. This paper gives an overview of the system architecture, the un-derlying technology and features. Although the original ARC information system came with acustom information schema, the standard GLUE2 model is being broadly endorsed by middlewaredevelopers now. ARC contributed to the GLUE2 development, and is among the first to imple-ment it, as described in this paper. Ongoing new developments targeting further convergence andharmonization of otherwise different Grid information systems is also discussed. NorduGrid European Middleware Initiative

A directory system is an indispensable and inseparable facility for a campus building. Numerous studies have been conducted on developing a building directory system for public visitors, however, to the best of our knowledge, little is known on a directory system for a campus building using 3D web-based simulation technology. This research paper presents a method to develop a building directory system which adopted 3D web-based simulation and conventional directory mode for each user interface. The system was developed using the user-center system design method which comprises of some iterative cyclesthat are aimed to achieved a usable design from user perspective. Although the system was primarily built based on the Joseph Wibowo Center Campus building as the model, the adopted technique is applicable to meet requirement of the various target building. The usability evaluation conformance test has shown promising results that the model was accepted by potential users.

SSRS provides a platform for developing and managing reports in an environment that includes multiple data sources of information. These data sources can include both relational data (for example, SQL Server, Oracle, MySQL, and so on) and non-relational data (for example, Active Directory, LDAP stores, and Exchange Server). Standards such as ODBC, OLE DB, and .NET facilitate the retrieval of data from these disparate data stores, so SSRS can access the data as long as your system has the relevant drivers. In the SSRS report design environment, configuring a dataset that drives the report content is the first step of the design process.

This paper describes some work which helps users of the X.500 directory to understand the unevenness of quality of service (QOS) concomitant with a widely distributed directory. In particular a user may see highly variant response times and availability of information for different parts of the directory.The paper discusses, and dismisses, two possible sources of QOS information. I use a third approach whereby a directory user interface maintains a record of response times and information availability and uses this database to provide a user with feedback about those aspects of the service. The DE user interface has been modified to incorporate this facility. The technique used also provides directory managers with a view of directory performance from a user's perspective.The work described has been partly funded by the PARADISE projects, through the European COSINE project and VALUE programme.

Directory systems have become a field of interest within the context of open systems. This is due to the various requirements raised by the scale of currently interconnected networks. The paper addresses several issues related to applying the X.500 directory service to network management. These include a comparison between the management information base (MIB) for management systems and the directory information base (DIB) for the directory services, a specification of how certain management information is incorporated into the underlying data model of the directory and an information exchange model for ensuring information accessibility to management activities. Some interesting benefits can be realized through integrating the X.500 directory into management systems. A concrete example of using a distributed directory service (DDS) in management illustrates the proposal. >

In this paper, an implementation of a Resource Directory, a directory storing descriptions of resources available in an Internet of Things system, based on a native XML database is described. Its performance is compared with performance of a Resource Directory with the same functionality, but implemented using a relational, SQL database. The evaluation results show hat the XML based Resource Directory provides more flexible management of the resources and shorter response time.

This paper propounds a NPKI model based LDAP directory service, the system combines the LDAP directory service and NPKI organically. In the case of the number of the certificate large increase, the system use LDAP directory to store a variety of certificates and certificate revocation list, achieve a distributed directory service through the division and recommendations of directory information, improve the reliability of the directory service greatly, simplify the management of directory service system and directory user, and solve the problem of load balancing.

This paper first researched on role-based access control model, and then analyzed the fundamental principle and application mode of LDAP directory services. On this basis, proposed a combinative method of LDAP directory services and role-based access control model, this method has features of flexibility, convenience and safety, it is accorded with the real demand and easy to understand, reduced the complexity of the safety management.

User management is one of the most time consuming tasks for administrators of large networks. This paper presents some techniques developed at Carnegie Mellon University to improve handling of accounts and access rights in a corporate environment. Directory information is typically handled by a hierarchy of LDAP servers maintained by different support groups on different administrative levels, from corporate to department. Optimization of information flow between these levels can be achieved by minimizing the need for communication between different support groups, and by reusing the data provided by the higher levels for automatic configuration of the lower levels. The method described here for achieving this goal is to trickle down user information from the higher to the lower administrative levels using successive cache mechanisms. This technique can be applied between different levels of LDAP servers (corporate, departmental, group), as well as for end-user computers. To preserve the flexibility of the configuration and the autonomy of the lower levels, the information stored by the LDAP server that's the closest to the end-user computer should have the highest precedence. By implementing the techniques described here, user management became more efficient, especially for automatically creating new accounts on end-user computers, expanding the number of local authenticated services, and granting local access rights for users.

This paper presents a NPKI model based LDAP directory service, describes the implementation of certificate and CRL management system in detail. The model uses three-tier structure of web browser-web server - the directory server, describes details of the implementation of the various functional components of certificate and CRL storage system, and describes certificate and CRL extensions, treatment of the recommendation of directory server and client, and several other basic services in detail. Meanwhile, it describes the details of the certificate and CRL in the inserted and asynchronous query implementation of directory information. The system is open, scalable, security, ease to maintain and so on, and provides users with a positive, intelligent, dynamic certificate services.

This paper provides an overview of the OSI Directory Service as defined in the ISO/CCITT Directory Services Standards [IS 9594, 1988] and updated in [IS 9594, 1992]. The OSI Directory Service is used to obtain information about named objects. For example, it could be used to obtain the electronic mail address of a person given the person's name. While the Directory Service will typically be used for obtaining addresses of objects, other descriptive information can be returned as well. The Directory Service is best described as a specialized distributed database. This paper describes the logical organization of information in this database, the protocols used to access this information, the methods of controlling access to the information, and the provisions for distributing, replicating and administering this information.

LDAP Multi-Master Technique is a replication approach using Syncrepl to replicate data to multiple servers. As the specialized database optimized for read access, the directory is used to represent heterogeneous entities in directory information tree (DIT). Compared with existing Sync replication models, the directory template replication model based on query templates proposed in this paper only replicates the entries matching the template specification. Replicated templates can reduce the complexity of the query containment problem and generalize the user queries corresponding to semantic regions demonstrating locality of reference. The synchronization protocol, which uses standard means of extending LDAP, is used to support (N-way) Multi-Master server replication modes. In this case, masters can be located in several physical sites, and other masters will continue the database if one master fails. Finally, we demonstrate the advantages of the novel model considering higher hit rates and the large update traffic with an experimental study based on real data and a prototype implementation of the LDAP directory cache.

URP, through a portal system, integrate various kinds of information in various application systems as a whole digital campus. Single sign-on is a method to achieve a unified portal authentication. On the basis of summarizing the single sign-on model usually used, a combined model based on broker, agent and token was proposed, which used cookie token, session tree of access permissions and control procedures to achieve cross-domain access, and used the LDAP database to complete the user's login, authentication and rights management.

Nowadays, XML has become the standard for representing and exchanging data over the Web and several approaches have been proposed for efficiently managing, storing, querying and representing XML data originating from diverse and often heterogeneous sources. The Lightweight Directory Access Protocol is a promising technology for XML data storage and retrieval since it facilitates access to information organized under a variety of frameworks and applications. As an open, vendor-neutral standard, LDAP provides an extendable architecture for centralized storage and management of information that needs to be available for today’s distributed systems and services. The similarities between XML and LDAP data representation have led to the idea of processing XML data within the LDAP framework. This chapter focuses on the topic of LDAP and XML integration with emphasis on the storage and retrieval approaches implemented so far. Moreover, the chapter includes an overview and survey of the theoretical background and the adopted practices as realized in the most popular and emerging frameworks which tune XML and LDAP.

This study researched into the method that allows only the certified user and computational engineer to possibly use network resources and computing resources by implementing the system of the intensified certification and security based on LDAP(Lightweight Directory Access Protocol) directory service, that copes with incapacitation in security program due to making the security program forcibly installed, and that can correctly track down the industrial-secret exporter along with applying the user-based security policy through inter-working with the existing method for the protection of industrial secret. Through this study, the intensified method for the protection of industrial secret can be embodied by implementing the integrated infra system through strengthening the existing system of managing the protection of industrial secret, and through supplementing vulnerability to the method for the protection of industrial secret.