A directory system

摘要

A directory system for providing directory services in a communications network using stored directory objects is disclosed. The directory system includes a network interface providing access to the directory system from a communications network; memory means; at least one processor; and service components providing services to users of the directory system based on stored directory object attributes associated with the services. The services include identity-based services based on identity management attributes for the users. The directory system stores in the memory means directory data representing directory objects. The directory data includes the following subsets: attribute data representing attributes of the directory objects; directory information tree (DIT) data associating the attributes with corresponding nodes of at least one hierarchical directory information tree (DIT) for the directory objects, and management data for managing the directory objects and the at least one DIT. Each attribute includes an attribute type and a corresponding value. The directory system stores the directory data in a memory resident database. Subsets of the directory data are stored in a segregated manner by storing each subset of related data in one or more memory segments dedicated to storage of that subset. Each memory segment is a contiguous portion of the memory means. The memory segments include one or more attribute segments and each of the attribute segments are dedicated to storage of attribute data for a plurality of directory objects, one or more DIT segments and one or more object segments. Each of the DIT segments are dedicated to storage of DIT data for a plurality of directory objects and each of the object segments are dedicated to storage of management data for a plurality of directory objects. Each of the services is associated with one or more corresponding ones of the attributes. The attribute data stored in the attribute segments are further segregated on the basis of these associations to facilitate processing of the attributes by the service components.