ENSURING DATA MAINTENANCE WITHIN A LDAP ENVIRONMENT

摘要

An approach for tracking system changes to support data maintenance within a directory service environment. Log fields are added to a directory service database for applications that interface with a directory service environment based on predetermined fields to be tracked. The log fields are updated to register database schema fields and data associated with the applications to create a history of changes. An application's identity and data access to the directory service environment are monitored and the log fields are updated to create a history of usage. The directory service database history of usage and changes are periodically analyzed to determine applications relationship dependencies and usage information. Associated maintenance actions are identified by detecting conditions in the directory service environment, based on predetermined maintenance criteria and maintenance is performed.

主权项

1. A computer system for tracking system changes to support data maintenance within a directory service environment, the computer system comprising:
one or more computer processors; one or more non-transitory computer readable storage media; program instructions stored on the one or more computer non-transitory readable storage media for execution by at least one of the one or more computer processors, the program instructions comprising: one or more computer readable storage media and program instructions stored on the one or more computer readable storage media, the program instructions comprising instructions to:
add one or more log fields to a directory service database for one or more applications which interface with a directory service environment based on one or more predetermined fields to be tracked;update the one or more log fields to register one or more database schema fields and one or more associated data associated with the one or more applications, thereby creating a history of changes, wherein creating the history of changes comprises updating the one or more log fields with at least one of the one or more associated data and the one or more associated data further comprises at least one of a one or more log value strings;monitor at least one of one or more applications identities and one or more instances of data access to the directory service environment, wherein the one or more instances of data access comprises access to at least one of the one or more log value strings, and wherein the one or more log value strings further comprises delimited values of at least one of application identifier, company name, read count, write count and last access timestamp;log the one or more log value strings, for each of the one or more applications identities and the one or more instances of data access, in the one or more log fields, thereby creating a history of usage, wherein creating the history of usage comprises updating the one or more log fields with at least one of the one or more instances of data access;analyze at least one of the directory service database, the one or more log value strings in the history of usage, or the history of changes;determine, based on the analysis, at least one of: one or more relationship dependencies associated with the one or more applications, one or more usage information associated with the one or more applications, or one or more maintenance actions associated with the one or more applications, wherein the one or more maintenance actions is at least one of: deleting unused information, rollback, backup, archive, restore, or deploy changes, wherein the one or more maintenance actions further comprises at least one of, adding, deleting, or changing at least one of the one or more database schema fields, the one or more associated data, or the one or more instances of data access; andrespond to detecting a condition in the directory service environment that meets a predetermined one or more maintenance criteria by performing at least one of the one or more maintenance actions and outputting a report by at least one of an ad hoc, schedule, or triggering event based on a predetermined threshold value.