Gesellschaft für Informatik e.V.

Lecture Notes in Informatics

Open Identity Summit 2013 P-223, 94-105 (2013).

Gesellschaft für Informatik, Bonn

Copyright © Gesellschaft für Informatik, Bonn


Selective LDAP Multi-Master Replication

Thomas Bauereiss , Stefan Gohmann , Dieter Hutter and Alexander Kläser


LDAP directory services are widely used to store and manage information about the assets of organisations and to ease the administration of IT infrastructure. With the popularity of cloud computing many companies start to distribute their computational needs in mixed-cloud infrastructures. However, distributing an LDAP directory including sensitive information to partially trusted cloud servers would constitute a major security risk. In this paper, we describe an LDAP replication mechanism that allows for a fine-grained selection of parts of an LDAP directory tree that are replicated to another server using content-based filters, while maintaining the availability and performance advantages of a full multi-master replication. We discuss sufficient conditions on replication topology and admissible operations such that the replication mechanism provides eventual consistency of selectively replicated data.

Full Text: PDF

Gesellschaft für Informatik, Bonn
ISBN 978-3-88579-617-6

Last changed 12.03.2014 15:23:16