企业级目录服务组件的研究和实现  

Research and implementation of enterprise directory service component

作　　者：吴少鸿[1] 韩霖[1] 左春[1] 

机构地区：[1]中国科学院软件研究所

出　　处：《计算机工程与设计》2006年第4期550-553,564,共5页Computer Engineering and Design

基　　金：国家863高技术研究发展计划基金项目(863-306-ZD-07-04);国家自然科学基金项目(19831020)

摘　　要：目前,由于各种应用系统在用户、权限和信息这些企业资源的管理上没有形成统一的管理机制和一致的安全措施,给企业应用带来了很大的困难。针对这个问题,提出了引入目录服务技术,设计并实现了支持LDAP的企业级目录服务组件(EDSC),将企业资源从应用系统中独立出来,为企业资源提供统一的存储、部署、管理和查询。EDSC通过数据库优化设计加快查询速度,使用灵活的模式配置实现动态修改目录数据单元,提供JAAS方式的身份认证和支持属性级操作设置的权限控制机制以保证数据安全。Currently, it is difficult for enterprise level application because various application systems adopt respective management mechanisms and safety precautions on management of enterprise resources such as user management, access control and information. To alleviate this problem, directory service technology was adopted. And an enterprise directory service component （EDSC）, which supports LDAP （Light Directory Access Protocol）, was designed and implemented. EDSC makes enterprise resources independent of application systems and allows a series of uniform operations of enterprise resources such as storage, allocation, management and query. Moreover, EDSC is capable of accelerating query speed by refining design of database, modifying directory data unit dynamically using flexible mode configuration, providing JAAS Identity authentication and presenting access control mechanisms which support attributelevel operation setup to ensure data security.

关 键 词：LDAP EDSC SCHEMA ACL SOAP 

分 类 号：TP311.52[自动化与计算机技术—计算机软件与理论]