TL;DR: Tdbm is a transaction procissing-database with a dbmlike interface that provides nested atomic transactions, volatile and parsistent databases, and support for very large objects and distributed operation, and its performance is examined.
Abstract: The dbm database library [1] introduced disk-based extensible hashing to UNIX. The library consists of functions to use a simple database consisting of kef/value pairs. A number of work-alikes have been developed, offering additional features [5] and free source code [1_4,25]. _Recently, a new package was developed that also offers improved performance [19]. None of these implementations, however, provide fault-tolerant behaviour. ' In many applications, a single high-level operation may cause many database items to 6s rrFdated, created, or deleted. If the application crashes while processing the operation, the database could be left in an inconsistent state. Current versions of dbmto nof handle this problem.-. Existing dbm implementations do not support concunent access, even though the T.^ .of lightweight processes in a UNIX environment is growing. To address -these deficiencies, tdbm was developed. Tdbm is a transaction procissing-database with a dbmlike interface. It provides nested atomic transactions, volatile and parsistent databases, and support for very large objects and distributed operation. This paper describes the design and implementation of tdbm and examines its performance. In the UNIX environment, the dbm database Cunent versions of dbm, however, do not meet liþtutyt [1] has become widely used to provide the requirements of these types of applications. disk-based extensible hashing for a variety oi appliMost importantly; they do not guarantee oonsistency cations. The library consists of functioni to uie a in the face of crashes. Existing dbm implementasimple database consisting of items (key/value pairs). tions cannot be used in a multi-threaded application, A number of work-alikes have been developed, even though the use of lightweight processes in a offering additional features [5] and free source code UNIX environment is growing. Also, no assistance 11'4,25-1. Recently, a new p_ackage was developed for implementing distributed and replicated databases that also offers improved performance [19] and thire is given. are plans to add a transaction mechanism to this To meet these requirements, tdbm (dbm with package [20]' transactions) *a* o.uetapa?. rau* provides nested As an integral part of our distributed system atomic transactions [13], volatile and persistent dataresearch, an effrcient and reliable database was bases, support for very large data, stores the database required. In these and many other applications, a within a single UNIX file, and provides assistance single high-level operation may resu.lf in several for managing distributed databases. Tdbm can be objects being updated, created, or deleted. If the configured to operate either as a conventional UNIX application or host system crashes while processing library or as part of a multi-threaded application. the operation, the database must not be ieft in aa The EAN object store [17], used by the gAN X.SOO inconsistent state. directory service [16], is based on tdbm. Many distributed applications have a server In the next section, the major design decisions component that can handle many client requests associated with tdbm are examined. In Section 3, simultaneously. For example, in the case oi the we look at the implementation of tdbm and in SecX.500 Directory Service [4], a server called the tion 4 an evaluation of the performancp of tdbn is Directory System Agent is most naturally implegiven. Finally, the paper concludes with some mented as a multi-thieaded application, wiih one or thoughts about our experiences with tdbm and posmore thrÞads servicing each client request. To maxsible extensions and improvements. The manual imize the level of concurrency, the database should page for the library appears in the appendix. permit simultaneous read-only and update operations @ble by a grant from oslware, Inc.
TL;DR: This paper examines whether Index DSAs really can solve a critical white pages search problem, and whether there are substantial differences in query resolution effectiveness between using a single Index DSA and using a small set of hierarchically organisedindex DSAs.
Abstract: This paper introduces the notion of X.500 Index DSAs. These are DSAs which hold indexes to entries held in the distributed X.500 directory. An Index DSA provides a similar enhancement to distributed X.500 to the one that archie provides for FTP. Index DSAs are created to provide specific services that are hard to provide in a fully distributed directory. An Index DSA is not technically different from an ordinary DSA, except that it does not provide references to parts of the DIT it does not hold. A pragmatic difference is that Index DSAs effectively hold pointers to entries, rather than the entries themselves. The paper then examines whether Index DSAs really can solve a critical white pages search problem, which is that if a user is unable to restrict the scope of a query to one organisation, then there is no systematic way of restricting the scope of the query to a small number of servers. The analysis is based on using a sample of past queries made within the UK DIT. The paper examines whether Index DSAs allow us to prune the search space sufficiently to allow efficient country-wide searches. The paper also examines whether there are substantial differences in query resolution effectiveness between using a single Index DSA and using a small set of hierarchically organised Index DSAs.
TL;DR: A prototype secure read only directory system agent emulator (SRODE) far the DoD directory and the demonstration of a multilevel SRODE, which is implemented as an application on SeaView, has shown the feasibility of building an MLS DoD Directory with existing technology.
Abstract: The US Department of Defense (DoD) has begun to plan for the implementation of a DoD Directory capability based on the CCITT X.500 series recommendations, which define the data communication network directory. The DoD Directory statement of requirements has established the need to hold data of different classifications (UNCLASSIFIED to SECRET) and to serve users with different clearances. We describe a prototype secure read only directory system agent emulator (SRODE) far the DoD directory. The demonstration of a multilevel SRODE, which is implemented as an application on SeaView, has shown the feasibility of building an MLS DoD Directory with existing technology. >
TL;DR: In this article, the authors proposed a system to update a directory by providing plural DSA (directory system agent), a master address control table and a user unprocessing table for a system, referring to the tables in correspondence with the update request of the directory.
Abstract: PURPOSE:To update a directory by providing plural DSA (directory system agent), a master address control table and a user unprocessing table for a system, referring to the tables in correspondence with the update request of the directory, introducing master DSA and exchanging other general DSA when a fault occurs in master DSA. CONSTITUTION:DSA 2 receiving the directory update request from a directory request source 3 refers to the master address control table 1-1 and the user unprocessing table 1-2 in DIB(directory information base) 1 in correspondence with the request and updates the directory when it itself is judged to be master DSA. When it is judged that it itself is not master DSA and the fault occurs in master DSA, it itself comes to master DSA and updates the directory. When it is judged that it itself is not master DSA and the fault does not occur in master DSA, master DSA is introduced and the directory is updated. Thus, the system which permanently updates the directory while the standard constitu tion of DIB 1 is held is constructed.
TL;DR: In this paper, a management method of dynamic security association and a communication entity is presented, aiming to solve the problems that the communication entity can not acquire supporting capability for the dynamic security associations through negotiation and needs to match with other processes to complete the management of the DSA in the prior art.
Abstract: The embodiment of the invention provides a management method of dynamic security association and a communication entity, aiming to solve the problems that the communication entity can not acquire supporting capability for the dynamic security association through negotiation and needs to match with other processes to complete the management of the dynamic security association in the prior art. The management method of the dynamic security association comprises the following steps that: a first communication entity operates the dynamic security association and sends an operation event to a second communication entity through operation information; the first communication entity receives confirmation information from the second communication entity; and the first communication entity correspondingly processes the dynamic security association according to the confirmation information. On the basis of the invention, the first communication entity and the second communication entity can know mutual capability and establish good coordination, thereby better protecting the service flows by using a DSA (directory system agent).