LDAP/X.500 Directory Server
Isode offers M-Vault, an advanced secure LDAP/X.500 directory server, which functions as a standalone directory server, can be utilised in distributed directory services, or holds configuration and user authentication data for Isode’s messaging solutions.
M-Vault’s high-performance design can handle tens of millions of entries and process tens of thousands of queries per second. It consists of features such as replication, robust security, and versatile cross-platform management tools. This solution is ideal for organisations that prioritise security.
Security
M-Vault offers distinctive security features, including strong authentication using X.509 PKI, signed operations, OAuth 2.0, and versatile prescriptive and role-based access control. It also provides a security policy, rule-based access control leveraging security labels, audit logging, and password policy.
Scalability and Performance
M-Vault’s design performs exceedingly well for read, search, and modification tasks and shows remarkable scalability for directories with tens of millions of entries. Its multi-protocol, multi-threaded structure is optimised for high performance and scalability, including compatibility with multi-processor systems, and additional protocols can be easily added. It also supports symmetric multiprocessing (SMP) to use the capabilities of multiple processors.
Replication and Data Distribution
The X.500 Directory System Protocol (DSP) can distribute data among servers. M-Vault also connects enterprise LDAP servers into a distributed directory through its LDAP chaining support. Data replication between servers takes place via the X.500 Directory Information Shadowing Protocol (DISP) and/or Isode’s multi-master replication. Communication between servers is protected with strong authentication based on X.509.
Reliability and Fault Tolerance
M-Vault works on a high-end database transaction subsystem that ensures that directory server databases are not violated even in the event of hardware, operating system, or application failures. This also facilitates online backup processes for disaster recovery. M-Vault offers failover clustering and offsite disaster recovery options, using either a SAN architecture or multiple independent failover servers and multi-master replication.
Conformity to Military Directory Standards
M-Vault conforms to ACP 133 (Military Directory) in compliance with Allied Communication Protocol 133, which details common directory procedures as the NATO standard for military directories. This framework is founded on the ISO/ITU X.500 Directory Standard, using X.500 protocols for replication and managing the directory.
LDAP, the standard internet-based protocol for directory access, also comes from X.500 and is typically preferred by military clients and applications for accessing data from an ACP 133 directory. M-Vault is fully compliant with ACP 133 and can offer ACP127 and STANAG 4406 messaging, including using it as a gateway connected with M-Switch MIXER as an ACP145.