ISO/IEC 9594-4:2020

Overview - ISO/IEC 9594-4:2020 (X.518)

ISO/IEC 9594-4:2020, also published as ITU‑T X.518 (10/2019), specifies the behaviour of Directory System Agents (DSAs) participating in a distributed Directory. It defines procedures and protocols to ensure consistent service when the Directory Information Base (DIB) is distributed across multiple DSAs and/or LDAP servers (with at least one DSA). The standard focuses on distributed operation of DSAs - LDAP server behaviour is governed by relevant LDAP specifications. It assumes many more queries than updates and clarifies that the Directory is not a general-purpose database.

Key topics and technical requirements

• Distributed Directory model: conceptual model for multiple DSAs cooperating to present a unified Directory.
• DSA interactions: decomposition of requests, uni‑chaining, multi‑chaining, and referral handling.
• Operation Dispatcher & Request Validation: procedures for dispatching, validating and processing distributed requests.
• Name resolution: procedures to locate Directory Service Entries (DSEs) across DSAs.
• Chained operations and errors: rules for issuing chained subrequests, error propagation and loop handling.
• Continuation references: issuing and processing continuation references when parts of the DIB are remote or shadowed.
• Results merging & shadowing: rules for combining replies from multiple DSAs and handling replicated/shadowed data.
• Authentication: procedures for distributed requester and results authentication.
• Operational bindings: hierarchical and non‑specific hierarchical operational binding types and management procedures.
• Knowledge administration: maintenance of cross‑references, inconsistency handling and cooperative knowledge management.
• ASN.1 bindings and annexes: formal ASN.1 definitions and example procedures are provided (see Annexes).

Practical applications and users

ISO/IEC 9594-4 is intended for:

• Directory service implementers and vendors building distributed Directory System Agents (DSAs).
• Architects integrating heterogeneous directories and LDAP servers across enterprises or federations.
• Identity and access management teams designing scalable directory topologies with referrals and chaining.
• Telecom and systems integrators using ITU‑T X.518-compatible directory infrastructures.
• Test and conformance labs verifying correct distributed behaviour of DSAs and operational binding implementations.

Benefits include predictable distributed query behaviour, standardized chaining/referral semantics, and interoperable operational bindings for large-scale directory deployments.

Related standards

• ISO/IEC 9594 series (The Directory)
• ITU‑T X.518 (equivalent specification)
• Relevant LDAP specifications (for LDAP server behaviour and protocol bindings)

Keywords: ISO/IEC 9594-4:2020, X.518, distributed directory, DSA, DIB, LDAP, chaining, referrals, continuation reference, operational binding, name resolution.