|
Another approach to protecting attributes is encrypting them. Check network configuration
Server has the capability to encrypt all instances of specified attributes.
This means that for every object containing such attributes, the data in that
attribute is encrypted using a symmetric key known to the directory server.
Various encryption methods can be configured, and different attributes can be
encrypted using different ciphers. Encryption and decryption are handled by the
directory server itself, so access to attributes is not controlled by this method.
However, data would be protected from unauthorized access if the directory data
was stolen or otherwise compromised.
Metadirectories. Analyzing the origin of the word "metadirectory," we see the
Greek phrase "meta-" which means "after," or "beyond." In modern English,
this term often describes abstraction. Thus, a metadirectory is an abstraction
of an actual directory. In this sense, it acts as a directory in some instances,
by providing user interaction via LDAP, but does not act as a directory in
other instances, because it is not the actual authoritative source of directory
information. A metadirectory is used to abstract data from other directories
into a single source, which can be used for two purposes
|