International Business Machines Corporation

Rama Mohan Thulasi Reddy

Annemarie Rose Fitterer

Richard J Smith

Aruna Yedavilli

Nicholas S Lloyd

An approach for tracking system changes to support data maintenance within a directory service environment. Log fields are added to a directory service database for applications that interface with a directory service environment based on predetermined fields to be tracked. The log fields are updated to register database schema fields and data associated with the applications to create a history of changes. An application's identity and data access to the directory service environment are monitored and the log fields are updated to create a history of usage. The directory service database history of usage and changes are periodically analyzed to determine applications relationship dependencies and usage information. Associated maintenance actions are identified by detecting conditions in the directory service environment, based on predetermined maintenance criteria and maintenance is performed.

Ensuring data maintenance within a LDAP environment

An approach for tracking system changes to support data maintenance within a directory service environment. Log fields are added to a directory service database for applications that interface with a directory service environment based on predetermined fields to be tracked. The log fields are updated to register database schema fields and data associated with the applications to create a history of changes. An application's identity and data access to the directory service environment are monitored and the log fields are updated to create a history of usage. The directory service database history of usage and changes are analyzed to determine applications relationship dependencies and usage information. Associated maintenance actions are identified by detecting conditions in the directory service environment, based on predetermined maintenance criteria and maintenance is performed.

Embodiments of the present invention disclose a method, computer program product, and system for generating a secure sandbox environment. A computer identifies components of a production environment that utilizes sensitive information during operation. The components of the production environment can include one or more server computers, one or more storage devices, and one or more applications. The computer receives a security policy that defines what constitutes sensitive information, and in response identifies the sensitive information of the production environment. The computer modifies the sensitive information such that the production environment can utilize the sensitive information without error, and such that the sensitive information cannot be identified from the modified sensitive information. The computer generates the sandbox environment, based at least in part, on the identified components of the production environment and the modified sensitive information.

Growing community of inventors

Round Rock, TX, United States of America

Rama Mohan Thulasi Reddy