Dynamic directory control registration

摘要

Systems and methods for extending the capability of a directory processor by, for example, registering a control are presented. This control can be a non-native control, or a modification to a native control. Further, this disclosure describes example of systems and methods for performing a directory operation, which may include one or more controls. At least some of the one or more controls may be non-native or dynamic controls. In some cases, some of the controls may be native controls.

主权项

1. A method for extending the capability of a directory processor performed by a computing system comprising one or more processors, the method comprising:
receiving at least one directory operation for interacting with a directory service system, the directory service system providing access to a set of records using a directory access protocol implemented by the directory service system; receiving a control definition, the control definition included in the at least one directory operation and comprising information relating to how the at least one directory operation should be processed on the directory service system; wherein the control definition is non-native to the directory access protocol implemented by the directory service system; accessing a control identifier associated with the control definition; determining whether the control identifier exists in a control database associated with a directory processor on the directory service system; in response to determining that the control identifier does not exist in the control database, registering the control definition with the control database and performing the at least one directory operation according to the control definition; and in response to determining that the control definition cannot be processed:
determining whether the control definition is critical based on a label included in the control definition;in response to determining that the control definition is critical, rejecting the at least one directory operation; andin response to determining that the control definition is not critical, performing the at least one directory operation regardless of whether the control definition is processed.