Information processing method, device, computer system and readable storage medium

Abstract

The present disclosure provides an information processing method executed by a management server, including: in response to a request instruction to add operation and maintenance account information for a target server, obtaining server identification information, factory customized account information, and operation and maintenance account information associated with the target server, wherein the target server is a server to be added to the management scope of the management server; and saving tasks carrying the operation and maintenance account information, factory customized account information, and server identification information into a cache queue, so that the target server obtains tasks in the cache queue, executes tasks, adds operation and maintenance account information, and modifies management authority of the factory customized account information. The present disclosure also provides an information processing device, a computer system, a readable storage medium, and a computer program product.

Description

Technical Field

[0001] The present disclosure relates to the fields of computer technology and Internet technology, and more specifically, to an information processing method, device, computer system, readable storage medium, and computer program product. Background Art

[0002] With the continuous development of computer and Internet technology, all walks of life involve the application of information technology. More and more companies are actively meeting the needs of the times and integrating information construction into their own business development in order to enhance their core competitiveness. However, in the process of entering the information age, improper security configuration of some system accounts, passwords, and other information will lead to security vulnerabilities and cause information security problems.

[0003] In the process of implementing the concept of the present disclosure, the inventors found that there are at least the following problems in the related technology: the account information in the prior art does not take security configuration issues into consideration or is processed by manual modification, which results in low work efficiency, prone to errors, and low security. Summary of the invention

[0004] In view of this, the present disclosure provides an information processing method, apparatus, computer system, readable storage medium, and computer program product executed by a management server.

[0005] One aspect of the present disclosure provides an information processing method executed by a management server, comprising:

[0006] In response to a request instruction to add operation and maintenance account information for a target server, obtaining server identification information, factory customized account information, and operation and maintenance account information associated with the target server, wherein the target server is a server to be added to the management scope of the management server; and

[0007] The tasks carrying the above-mentioned operation and maintenance account information, the above-mentioned factory customized account information and the above-mentioned server identification information are saved in the cache queue, so that the above-mentioned target server obtains the tasks in the above-mentioned cache queue, executes the above-mentioned tasks, adds the above-mentioned operation and maintenance account information and modifies the management authority of the above-mentioned factory customized account information.

[0008] According to an embodiment of the present disclosure, it also includes:

[0009] In response to a request instruction to add or modify business account information for the target server, obtaining server identification information, operation and maintenance account information of the target server, and business account information associated with the target server;

[0010] Saving the task carrying the server identification information, the operation and maintenance account information, and the business account information into the cache queue;

[0011] Read the tasks in the cache queue and perform operations of adding or modifying business account information based on the tasks; and

[0012] The above operations of adding or modifying business account information are written into the database.

[0013] According to an embodiment of the present disclosure, in response to a request instruction to add or modify business account information for the target server, obtaining server identification information, operation and maintenance account information, and business account information associated with the target server includes:

[0014] responding to a request instruction to add or modify service account information for the target server, wherein the request instruction carries service category identification information of the target server; and

[0015] The server identification information, operation and maintenance account information of the target server corresponding to the business category identification information and the business account information associated with the target server are obtained.

[0016] According to an embodiment of the present disclosure, it also includes:

[0017] In response to a request instruction for modifying the management authority of the factory customized account information of the target server, obtaining the server identification information and operation and maintenance account information of the target server;

[0018] The task carrying the server identification information and the operation and maintenance account information is saved in the cache queue;

[0019] Reading the tasks in the cache queue, and executing an operation of modifying the management authority of the factory customized account information based on the tasks; and

[0020] The operation of modifying the management authority of the factory customized account information is written into the database.

[0021] According to an embodiment of the present disclosure, it also includes:

[0022] In response to a request instruction for modifying the management authority of the factory customized account information of the target server, acquiring the server identification information and the factory customized account information of the target server; and

[0023] The tasks carrying the above-mentioned server identification information and the above-mentioned factory customized account information are saved in the above-mentioned cache queue, so that the above-mentioned target server can read the tasks in the above-mentioned cache queue and execute the above-mentioned tasks, modify the management authority of the above-mentioned factory customized account information, and delete other account information except the above-mentioned factory customized account information.

[0024] According to an embodiment of the present disclosure, the operation and maintenance account information includes an operation and maintenance password identifier and an operation and maintenance account identifier; the method further includes:

[0025] In response to a request instruction for modifying the operation and maintenance password identifier of the target server, obtaining the operation and maintenance account information, server identification information, factory customized account information and target operation and maintenance password identifier of the target server;

[0026] The task carrying the operation and maintenance account information, server identification information, factory customized account information and target operation and maintenance password identification of the target server is saved in the cache queue;

[0027] Read the tasks in the cache queue and perform the operation of modifying the operation and maintenance password identifier according to the tasks; and

[0028] The above operation of modifying the operation and maintenance password identifier is written into the database.

[0029] According to an embodiment of the present disclosure, the management authority for the target server to obtain the task in the cache queue and execute the task, add the operation and maintenance account information, and modify the factory customized account information includes:

[0030] The target server obtains the tasks in the cache queue and guides the memory operating system in the cache queue;

[0031] Obtaining brand identification information of the target server through the memory operating system;

[0032] Based on the brand identification information, run the account management tool of the target server; and

[0033] Perform the above tasks and use the above account management tool to add the above operation and maintenance account information and modify the management authority of the above factory customized account information.

[0034] According to an embodiment of the present disclosure, the above-mentioned server identification information includes one or more of server serial identification information, server MAC address information, and server IP address information.

[0035] Another aspect of the present disclosure provides an information processing device executed by a management server, comprising:

[0036] an acquisition module, configured to acquire, in response to a request instruction for adding operation and maintenance account information for a target server, server identification information, factory customized account information, and operation and maintenance account information associated with the target server, wherein the target server is a server to be added to the management scope of the management server; and

[0037] A saving module is used to save the tasks carrying the above-mentioned operation and maintenance account information, the above-mentioned factory customized account information and the above-mentioned server identification information into a cache queue, so that the above-mentioned target server obtains the tasks in the above-mentioned cache queue and executes the above-mentioned tasks, adds the above-mentioned operation and maintenance account information and modifies the management authority of the above-mentioned factory customized account information.

[0038] Another aspect of the present disclosure provides a computer system, comprising:

[0039] one or more processors;

[0040] a memory for storing one or more programs,

[0041] When the one or more programs are executed by the one or more processors, the one or more processors implement the above methods.

[0042] Another aspect of the present disclosure provides a computer-readable storage medium having executable instructions stored thereon, which, when executed by a processor, enables the processor to implement the above method.

[0043] Another aspect of the present disclosure provides a computer program product, including computer executable instructions, which are used to implement the above method when executed.

[0044] According to the embodiments of the present disclosure, an information processing method executed by a management server is adopted, including: in response to a request instruction to add operation and maintenance account information for a target server, obtaining server identification information, factory customized account information and operation and maintenance account information associated with the target server, wherein the target server is a server to be added to the management scope of the management server; and saving tasks carrying the operation and maintenance account information, factory customized account information and server identification information into a cache queue so that the target server obtains the tasks in the cache queue and executes the tasks, adding the operation and maintenance account information and modifying the management authority of the factory customized account information. The management server adds the operation and maintenance account information to the target server, and manages the target server through the operation and maintenance account information, thereby avoiding the method of managing the target server by the factory customized account information or manually adding or modifying the account information. Therefore, the problems of low security and easy leakage of account information in the prior art that the target server is managed only by the factory customized account information and the technical problems of low efficiency and easy error in manually modifying the account information in the prior art are at least partially overcome, thereby achieving the technical effect of automatic control of the target server account information, high security, high efficiency and high accuracy. BRIEF DESCRIPTION OF THE DRAWINGS

[0045] The above and other objects, features and advantages of the present disclosure will become more apparent through the following description of the embodiments of the present disclosure with reference to the accompanying drawings, in which:

[0046] Figure 1 Schematically illustrates an exemplary system architecture to which the information processing method and apparatus executed by a management server of the present disclosure can be applied;

[0047] Figure 2 A flowchart schematically shows an information processing method executed by a management server according to an embodiment of the present disclosure;

[0048] Figure 3 A flowchart schematically shows an information processing method executed by a management server according to another embodiment of the present disclosure;

[0049] Figure 4 A flowchart schematically shows an information processing method executed by a management server according to another embodiment of the present disclosure;

[0050] Figure 5 A flowchart of adding or modifying service account information for a target server according to another embodiment of the present disclosure is schematically shown;

[0051] Figure 6 A flowchart schematically illustrates the management authority for modifying factory customized account information of a target server according to another embodiment of the present disclosure;

[0052] Figure 7 A flowchart schematically shows an information processing method executed by a management server according to another embodiment of the present disclosure;

[0053] Figure 8 A flowchart of a method for processing server BMC account information according to another embodiment of the present disclosure is schematically shown;

[0054] Fig. 9 A block diagram schematically illustrates an information processing device executed by a management server according to an embodiment of the present disclosure; and

[0055] Fig.10 The block diagram schematically shows a computer system suitable for implementing the information processing method executed by the management server according to an embodiment of the present disclosure. DETAILED DESCRIPTION

[0056] Hereinafter, embodiments of the present disclosure will be described with reference to the accompanying drawings. However, it should be understood that these descriptions are exemplary only and are not intended to limit the scope of the present disclosure. In the following detailed description, for ease of explanation, many specific details are set forth to provide a comprehensive understanding of the embodiments of the present disclosure. However, it is apparent that one or more embodiments may also be implemented without these specific details. In addition, in the following description, descriptions of known structures and technologies are omitted to avoid unnecessary confusion of the concepts of the present disclosure.

[0057] The terms used herein are only for describing specific embodiments and are not intended to limit the present disclosure. The terms "comprise", "include", etc. used herein indicate the existence of the features, steps, operations and / or components, but do not exclude the existence or addition of one or more other features, steps, operations or components.

[0058] All terms (including technical and scientific terms) used herein have the meanings commonly understood by those skilled in the art, unless otherwise defined. It should be noted that the terms used herein should be interpreted as having a meaning consistent with the context of this specification, and should not be interpreted in an idealized or overly rigid manner.

[0059] In the case of using expressions such as "at least one of A, B, and C, etc.", it should generally be interpreted in accordance with the meaning of the expression generally understood by those skilled in the art (for example, "a system having at least one of A, B, and C" should include but is not limited to a system having A alone, B alone, C alone, A and B, A and C, B and C, and / or A, B, C, etc.). In the case of using expressions such as "at least one of A, B, or C, etc.", it should generally be interpreted in accordance with the meaning of the expression generally understood by those skilled in the art (for example, "a system having at least one of A, B, or C" should include but is not limited to a system having A alone, B alone, C alone, A and B, A and C, B and C, and / or A, B, C, etc.).

[0060] The embodiment of the present disclosure provides an information processing method and device executed by a management server. The method includes, in response to a request instruction to add operation and maintenance account information for a target server, obtaining server identification information, factory customized account information, and operation and maintenance account information associated with the target server, wherein the target server is a server to be added to the management scope of the management server; and saving tasks carrying the operation and maintenance account information, factory customized account information, and server identification information into a cache queue, so that the target server obtains the tasks in the cache queue, executes the tasks, and adds the operation and maintenance account information and modifies the management authority of the factory customized account information.

[0061] Figure 1 The exemplary system architecture 100 to which the information processing method and apparatus executed by the management server according to the embodiment of the present disclosure can be applied is schematically shown. It should be noted that: Figure 1 What is shown is merely an example of a system architecture to which the embodiments of the present disclosure can be applied, in order to help those skilled in the art understand the technical content of the present disclosure, but it does not mean that the embodiments of the present disclosure cannot be used in other devices, systems, environments or scenarios.

[0062] like Figure 1 As shown, the system architecture 100 according to this embodiment may include a target server 101, a management server 102, and a network 103. The network 103 is used to provide a medium for a communication link between the target server 101 and the management server 102. The network 103 may include various connection types, such as wired and / or wireless communication links, and the like.

[0063] The user can use the target server 101 to interact with the management server 102 through the network 103 to receive or send messages, etc.

[0064] It should be noted that the information processing method performed by the management server provided in the embodiment of the present disclosure can generally be performed by the management server 102. Accordingly, the information processing device performed by the management server provided in the embodiment of the present disclosure can generally be set in the management server 102. The information processing method performed by the management server provided in the embodiment of the present disclosure can also be performed by a server or server cluster that is different from the management server 102 and can communicate with the target server 101 and / or the management server 102. Accordingly, the information processing device performed by the management server provided in the embodiment of the present disclosure can also be set in a server or server cluster that is different from the management server 102 and can communicate with the target server 101 and / or the management server 102.

[0065] It should be understood that Figure 1 The number of target servers, networks and management servers in the figure is only for illustration. Any number of target servers, networks and management servers may be provided as required.

[0066] Figure 2 The flowchart schematically shows an information processing method executed by a management server according to an embodiment of the present disclosure.

[0067] like Figure 2 As shown, the method includes operations S201-S202.

[0068] In operation S201, in response to a request instruction to add operation and maintenance account information for a target server, server identification information, factory customized account information, and operation and maintenance account information associated with the target server are obtained, wherein the target server is a server to be added to the management scope of the management server.

[0069] According to an embodiment of the present disclosure, the target server may include a baseboard management controller (BMC) on the server, namely, a server BMC. The server BMC is a small operating system independent of the server system, and its function is to facilitate remote management, monitoring, installation, restart and other operations on the server system. The server BMC starts running when the power is turned on, and is not affected by the business program because it is independent of the business program.

[0070] In actual applications, the factory customized account information may be an account customized by the server manufacturer according to user requirements or rules when the target server leaves the factory. The factory customized account information is public information, and only the factory customized account information is used for management and maintenance. It is easy to be leaked, allowing other non-target users to perform unsafe operations on the target server, such as turning on, off, and restarting the server, resulting in security risks.

[0071] In actual applications, another implementation method is manual management, that is, in each stage of the target server life cycle, multiple account information and different management permissions are set for the target server for easy management. However, target servers of different brands have different strategies for adding, deleting and modifying account information; there are many links involved, and the number of target servers is large. The manual setting method is not only time-consuming and labor-intensive, but also inefficient and prone to errors. In addition, it is easy to lose account information, forming an unstable security factor.

[0072] According to the embodiments of the present disclosure, a management server is set up to perform unified management of account information, with a high degree of automation. In the present disclosure, operation and maintenance account information can be added to the target server to be added to the management scope of the management server, management authority can be granted to the operation and maintenance account information, and management can be performed using the operation and maintenance account information, thereby improving the security protection of account information and improving the management efficiency of account information.

[0073] According to an embodiment of the present disclosure, the server identification information may include one or more of server serial identification information, server MAC address information, and server IP address information.

[0074] According to an embodiment of the present disclosure, server identification information can characterize a target server, wherein server sequence identification information is identification information of the target server, but is not limited thereto, and other identification information such as a QR code, barcode, etc. can also be used to uniquely identify the target server.

[0075] In an embodiment of the present disclosure, the server serial identification information and the server MAC address information may be customized identification information during factory customization; according to an embodiment of the present disclosure, the server MAC address information and the server IP address information of the target server may be used to establish a network connection with the management server to realize information management and data transmission.

[0076] According to the embodiments of the present disclosure, the operation and maintenance account information associated with the target server can be customized by the user or generated by the management server according to certain rules. As long as the operation and maintenance account information is non-public information and can ensure the information security of the target server, it is sufficient.

[0077] According to an embodiment of the present disclosure, the server identification information of the target server, the factory customized account information, and the operation and maintenance account information associated with the target server can be imported into the CMDB system by the user, and the management server obtains it from the CMDB system.

[0078] In operation S202, the task carrying the operation and maintenance account information, the factory customized account information and the server identification information is saved in the cache queue so that the target server obtains the task in the cache queue and executes the task, adding the operation and maintenance account information and modifying the management authority of the factory customized account information.

[0079] According to an embodiment of the present disclosure, the cache queue can be a task queue in the redis cache, in which one task or multiple tasks in batches can be stored; the task carries operation and maintenance account information, factory customized account information and server identification information; in the present disclosure, through the server identification information, the corresponding target server can obtain the task in the corresponding cache queue, so that the target server can add operation and maintenance account information, and modify the management authority of the factory customized account information. In the present disclosure, the management authority of the factory customized account information can be modified and disabled to be only readable; and the operation and maintenance account information of the target server can also be set to enable management authority. In this way, the security of account information and the stability of operation at each stage of the target server are guaranteed.

[0080] According to the embodiments of the present disclosure, the account information of the target server is uniformly managed through the management server, and the operation and maintenance account information is added and the management authority of the account information is modified, thereby greatly improving the management efficiency of the target server in parallel, with a high degree of automation and liberating human resources to a large extent; in addition, the confidentiality is good and the security is high, reducing the risk of account information leakage.

[0081] Reference below Figure 3 to Figure 7 , combined with specific embodiments Figure 2 The method shown is further explained.

[0082] Figure 3 The flowchart of the information processing method executed by the management server according to another embodiment of the present disclosure is schematically shown.

[0083] like Figure 3 As shown, the method includes operations S310 to S360.

[0084] In operation S310, in response to a request instruction to add operation and maintenance account information for a target server, server identification information, factory customized account information, and operation and maintenance account information associated with the target server are obtained, wherein the target server is a server to be added to the management scope of the management server.

[0085] In operation S320, the task carrying the operation and maintenance account information, the factory customization account information and the server identification information is saved in a cache queue.

[0086] In operation S330, the target server obtains the tasks in the cache queue and directs the memory operating system in the cache queue.

[0087] According to an embodiment of the present disclosure, the target server may be a newly-made server, and the information processing performed by the management server is the processing performed in the shelf stage, and the internal operating system has not been established. In the present disclosure, the target server may read the tasks in the cache queue and boot the memory operating system through the PXE environment; wherein the memory operating system includes an account management plug-in.

[0088] According to an embodiment of the present disclosure, a memory operating system (RAM OS) is an operating system that does not rely on a hard disk after startup. After the memory operating system is started, all files can be loaded into the memory for operation. It runs fast, will not be infected, and can better protect the core files of the system from damage.

[0089] In operation S340, brand identification information of the target server is obtained through the memory operating system.

[0090] In operation S350, an account management tool of the target server is run based on the brand identification information.

[0091] In operation S360, the task is executed, and the account management tool is used to add the operation and maintenance account information and modify the management authority of the factory customized account information.

[0092] According to an embodiment of the present disclosure, an account management plug-in may be called through a memory operating system, and brand identification information of a target server may be acquired by using the account management plug-in.

[0093] In the present disclosure, for example, the target server BMC, each target server BMC of different brands has different BMC account management tools, and the account management plug-in can select the corresponding account management tool according to the brand identification information of the target server. Run the account management tool in a local running mode, add operation and maintenance account information, and modify the management authority of the factory customized account information.

[0094] According to an embodiment of the present disclosure, the information processing method is used to add the operation and maintenance account information of the target server, which is suitable for adding the operation and maintenance account information of the target server that has just been put on the shelf and has not yet entered the operation stage.

[0095] According to an embodiment of the present disclosure, after adding operation and maintenance account information to the target server, opening management authority, and disabling management authority of the factory customized account information, the target server can install the system and run it.

[0096] Figure 4 The flowchart schematically shows an information processing method executed by a management server according to another embodiment of the present disclosure.

[0097] like Figure 4As shown, the method includes operations S410 to S440.

[0098] In operation S410, in response to a request instruction for modifying an operation and maintenance password identifier of a target server, operation and maintenance account information, server identification information, factory customized account information, and a target operation and maintenance password identifier of the target server are obtained.

[0099] According to an embodiment of the present disclosure, the target operation and maintenance password identifier is the final operation and maintenance password identifier to be modified.

[0100] According to an embodiment of the present disclosure, the operation and maintenance account information includes an operation and maintenance password identifier and an operation and maintenance account identifier. During the operation phase of the target server, in order to ensure information security, it is appropriate to periodically modify the operation and maintenance password identifier of the target server.

[0101] In operation S420, the task carrying the target server's operation and maintenance account information, server identification information, factory customized account information, and target operation and maintenance password identification is saved in a cache queue.

[0102] In operation S430, the task in the cache queue is read, and an operation of modifying the operation and maintenance password identifier is performed according to the task.

[0103] According to an embodiment of the present disclosure, the operation of modifying the operation and maintenance password identifier may be an operation of modifying the operation and maintenance password identifier of the target server BMC, which may be performed through remote control. The operation of modifying the operation and maintenance password identifier may be that the management server accesses the target server BMC system through the operation and maintenance account information of the target server BMC, enables the factory customized account information, opens the management authority of the factory customized account information, and then re-accesses the target server BMC system based on the factory customized account information to modify the operation and maintenance password identifier, and finally uses the modified target operation and maintenance password identifier and the operation and maintenance account identifier to access the target server BMC system again, disables the management authority of the factory customized account information, and completes the operation of modifying the operation and maintenance password identifier.

[0104] In operation S440, the operation of modifying the operation and maintenance password identifier is written into the database.

[0105] According to an embodiment of the present disclosure, writing the operation of modifying the operation and maintenance password identifier into the database can be writing a log into the database in real time; wherein the log includes the operation of modifying the operation and maintenance password identifier and the data involved. Refreshing the BMC account management page of the management server presents the operation progress of the account information of the target server BMC.

[0106] According to the embodiments of the present disclosure, by uniformly managing and periodically modifying the operation and maintenance password identification through the management server, large-scale full-volume operations can be achieved, manpower can be saved, efficiency can be improved, and the degree of automation and security can be high.

[0107] Figure 5 A flowchart for adding or modifying service account information for a target server according to another embodiment of the present disclosure is schematically shown.

[0108] like Figure 5 As shown, the method includes operations S510 to S540.

[0109] In operation S510, in response to a request instruction to add or modify service account information for a target server, server identification information, operation and maintenance account information of the target server, and service account information associated with the target server are obtained.

[0110] According to the embodiments of the present disclosure, the user can log in to the system of the target server through the business account information, and use the business account information to check whether the operation of the target server is normal. For example, in the present disclosure, different target server BMCs need to establish their own business account information for business management during the operation stage.

[0111] According to an embodiment of the present disclosure, the service account information associated with the target server is the service account information to be added or the final service account information to be modified.

[0112] According to an embodiment of the present disclosure, in response to a request instruction to add or modify business account information for a target server, the management server can associate the corresponding target server through server identification information, and obtain management authority based on the operation and maintenance account information to add or modify the business account information of the target server.

[0113] In operation S520, the task carrying the server identification information, the operation and maintenance account information, and the business account information is saved in a cache queue.

[0114] According to the embodiments of the present disclosure, in actual operation, the task may be one or multiple tasks to be processed in batches; the cache queue may be used to simultaneously save the batch tasks of adding or modifying the business account information of the target server in the cache queue of redis for batch processing.

[0115] In operation S530 , the task in the cache queue is read, and an operation of adding or modifying the service account information is performed based on the task.

[0116] According to an embodiment of the present disclosure, the management server can read the tasks in the cache queue, establish a network connection with the target server based on the server identification information carried in the task, and use the operation and maintenance account information to access the system of the target server and add or modify the account information.

[0117] In operation S540, the operation of adding or modifying the business account information is written into the database.

[0118] According to an embodiment of the present disclosure, writing the operation of adding or modifying the business account information into the database may be writing a log into the database in real time; wherein the log includes the operation of adding or modifying the business account information and the data involved. The operation of adding or modifying the business account information of the target server is written into the database in real time, so that the management server can complete the presentation of the operation progress of adding or modifying the business account information of the target server when refreshing.

[0119] According to the embodiments of the present disclosure, the management server uniformly manages the multi-level account information of the target server, which is simple to manage, accurate in information, and highly secure.

[0120] According to an embodiment of the present disclosure, in response to a request instruction to add or modify business account information for a target server, obtaining server identification information, operation and maintenance account information, and business account information associated with the target server may include responding to a request instruction to add or modify business account information for a target server, wherein the request instruction carries business category identification information of the target server; and obtaining the server identification information, operation and maintenance account information, and business account information associated with the target server corresponding to the business category identification information.

[0121] According to an embodiment of the present disclosure, the request instruction may carry business category identification information of the target server, that is, keywords of the business category executed by the target server, but is not limited to this. The request instruction may also carry information of the computer room where the target server is located or brand identification information of the target server, etc.

[0122] According to an embodiment of the present disclosure, the generation of business account information associated with the target server can be based on business category identification information, but is not limited thereto, and can also be based on the computer room information of the target server or the brand identification information of the target server.

[0123] According to the embodiments of the present disclosure, generating business account information according to business category identification information and adding or modifying business account information to a target server according to the business category identification information are more targeted and clearly divided.

[0124] Figure 6 A flowchart for modifying the management authority of factory customized account information of a target server according to another embodiment of the present disclosure is schematically shown.

[0125] like Figure 6 As shown, the method includes operations S610 to S640.

[0126] In operation S610, in response to a request instruction for modifying the management authority of the factory customized account information of the target server, server identification information and operation and maintenance account information of the target server are acquired.

[0127] According to the embodiments of the present disclosure, the management authority of the factory customized account information of the target server can be modified to modify the management authority of the factory customized account information of the server BMC, such as enabling or disabling the management authority of the factory customized account information. It can be applied to the maintenance stage and business change stage of the target server, enabling the management authority of the factory customized account information for on-site outsourcing engineers or manufacturer engineers to diagnose the target server; the management authority of the factory customized account information can be disabled again for the target server after maintenance.

[0128] In operation S620, the task carrying the server identification information and the operation and maintenance account information is saved in a cache queue.

[0129] According to an embodiment of the present disclosure, a cache queue may be used to save tasks for batch enabling or disabling factory customized account information, thereby improving efficiency.

[0130] In operation S630, the task in the cache queue is read, and an operation of modifying the management authority of the factory customized account information is performed based on the task.

[0131] According to an embodiment of the present disclosure, the management authority for modifying the factory customized account information based on task execution can be, for example, to use server identification information to establish a remote connection with the target server, use operation and maintenance account information to access the target server system of the target server, and disable or enable the management authority for the factory customized account information of the target server.

[0132] In operation S640, an operation of modifying the management authority of the factory customized account information is written into the database.

[0133] According to an embodiment of the present disclosure, writing the operation of modifying the management authority of the factory customized account information into the database can be writing a log into the database in real time; wherein the log includes the operation of modifying the management authority of the factory customized account information and the data involved. The operation of modifying the management authority of the factory customized account information is written into the database in real time, so that the management server can present the operation progress of enabling or disabling the factory customized account information of the target server when refreshing.

[0134] According to an embodiment of the present disclosure, during the maintenance phase or business change phase of the target server, the factory customized account information of the target server is enabled or disabled through the management server as needed, thereby ensuring the security of the operation and maintenance account information and the business account information and avoiding information leakage.

[0135] Figure 7 The flowchart schematically shows an information processing method executed by a management server according to another embodiment of the present disclosure.

[0136] like Figure 7 As shown, the method includes operations S710 to S720.

[0137] In operation S710, in response to a request instruction for modifying the management authority of the factory customized account information of the target server, server identification information and the factory customized account information of the target server are acquired.

[0138] In operation S720, the task carrying the server identification information and the factory customized account information is saved in the cache queue so that the target server reads the task in the cache queue and executes the task, modifies the management authority of the factory customized account information, and deletes other account information except the factory customized account information.

[0139] According to an embodiment of the present disclosure, the operation of modifying the management authority of the factory customized account information and deleting other account information except the factory customized account information can be applied to, for example, the server BMC is used as the target server and the operation is adopted in the destocking stage of the target server.

[0140] According to an embodiment of the present disclosure, the management server may process a task or batches of tasks by saving the tasks in a cache queue.

[0141] According to an embodiment of the present disclosure, the target server can read tasks in the cache queue and boot the memory operating system through the PXE environment, wherein the memory operating system can call the account management plug-in and use the account management plug-in to obtain the brand identification information of the target server.

[0142] In the present disclosure, for example, the target server BMC, each target server BMC of different brands has different BMC account management tools, and the account management plug-in can select the corresponding account management tool according to the brand identification information of the target server. The account management tool is run in a local running mode, the management authority of the factory customized account information is enabled, and other account information except the factory customized account information is deleted.

[0143] According to the embodiment of the present disclosure, the information processing method is used to modify the management authority of the factory customized account information and delete other account information except the factory customized account information, which is applicable to the destocking stage of the target server, to enable the management authority of the factory customized account information, and to delete other account information except the factory customized account information. It can ensure that the operation and maintenance account information and business account information of the target server are not leaked, and ensure the information security of users.

[0144] The technical solution of the present disclosure is further described below in conjunction with specific embodiments. However, it should be noted that the following embodiments are only used to illustrate the technical solution of the present disclosure, but the present disclosure is not limited thereto.

[0145] Figure 8 The flowchart of a method for processing server BMC account information according to another embodiment of the present disclosure is schematically shown.

[0146] like Figure 8 As shown, the server BMC account information processing method disclosed in the present invention runs through all stages from the server BMC leaving the factory, putting it on the shelf, running, repairing, changing, and returning it to the warehouse.

[0147] According to an embodiment of the present disclosure, a method for processing server BMC account information executed by a management server may include the following operations.

[0148] At the factory stage, the BMC account is uniformly customized on the server manufacturer side to generate BMC factory customized account information;

[0149] Delivered to the computer room for storage, the management server (BMC account management system) generates a task to add BMC operation and maintenance account information, which is run locally on the BMC side to add BMC operation and maintenance account information, and the management authority for BMC factory customized account information is disabled;

[0150] During the operation phase, remote management of the management server is used to add or modify the business account information of the BMC to achieve management and monitoring of the BMC business operation; and the BMC operation and maintenance password identifier is regularly modified to ensure the security and stability of the password information;

[0151] On-site maintenance: enable the management authority of the BMC's factory customized account information through the management server so that the factory customized account information can be used for testing. After the maintenance is completed, disable the management authority of the BMC's factory customized account information.

[0152] During the change phase, the business account information of the BMC is added or modified through the management server.

[0153] De-stocking: Generate a task through the management server, run it locally on the BMC side to enable the management authority of the BMC's factory customized account information, and then delete the BMC operation and maintenance account information and the BMC business account information.

[0154] According to the embodiments of the present disclosure, a BMC account management system is established through a management server so as to formulate a management method for BMC account information, thereby completing the automated management of server BMC account information from the server BMC entry to the delisting and return stage, improving operation and maintenance efficiency, and saving human resources.

[0155] Fig. 9 A block diagram schematically shows an information processing device executed by a management server according to an embodiment of the present disclosure.

[0156] like Fig. 9 As shown, the information processing device 900 executed by the management server includes an acquisition module 910 and a storage module 920.

[0157] an acquisition module 910, configured to acquire, in response to a request instruction for adding operation and maintenance account information for a target server, server identification information, factory customized account information, and operation and maintenance account information associated with the target server, wherein the target server is a server to be added to the management scope of the management server; and

[0158] The saving module 920 is used to save the tasks carrying the operation and maintenance account information, the factory customized account information and the server identification information into the cache queue, so that the target server can obtain the tasks in the cache queue and execute the tasks, add the operation and maintenance account information and modify the management authority of the factory customized account information.

[0159] According to an embodiment of the present disclosure, the information processing device 900 executed by the management server further includes a business account acquisition module, a business account storage module, a business account execution module, and a business account writing module.

[0160] A business account acquisition module, configured to obtain server identification information, operation and maintenance account information, and business account information associated with the target server in response to a request instruction to add or modify business account information for the target server;

[0161] A business account saving module is used to save tasks carrying server identification information, operation and maintenance account information, and business account information into a cache queue;

[0162] A business account execution module, used to read tasks in the cache queue and perform operations of adding or modifying business account information based on the task execution; and

[0163] The business account writing module is used to write the operation of adding or modifying business account information into the database.

[0164] According to an embodiment of the present disclosure, the business account acquisition module includes a response unit and an acquisition unit.

[0165] a responding unit, configured to respond to a request instruction to add or modify service account information for a target server, wherein the request instruction carries service category identification information of the target server; and

[0166] The acquisition unit is used to acquire server identification information of the target server corresponding to the business category identification information, operation and maintenance account information, and business account information associated with the target server.

[0167] According to an embodiment of the present disclosure, the information processing device 900 executed by the management server further includes a first management authority acquisition module, a first management authority storage module, a first management authority execution module, and a first management authority writing module.

[0168] A first management authority acquisition module, configured to acquire server identification information and operation and maintenance account information of the target server in response to a request instruction for management authority for modifying factory customized account information of the target server;

[0169] A first management authority saving module is used to save tasks carrying server identification information and operation and maintenance account information into a cache queue;

[0170] A first management authority execution module is used to read the tasks in the cache queue and execute the operation of modifying the management authority of the factory customized account information based on the tasks; and

[0171] The first management authority writing module is used to write the operation of modifying the management authority of the factory customized account information into the database.

[0172] According to an embodiment of the present disclosure, the information processing device 900 executed by the management server further includes a second management authority acquisition module and a second management authority storage module.

[0173] A second management authority acquisition module, configured to acquire server identification information and factory customized account information of the target server in response to a request instruction for management authority for modifying the factory customized account information of the target server; and

[0174] The second management authority saving module is used to save tasks carrying server identification information and factory customized account information into a cache queue so that the target server can read the tasks in the cache queue and execute the tasks, modify the management authority of the factory customized account information, and delete other account information except the factory customized account information.

[0175] According to an embodiment of the present disclosure, the operation and maintenance account information includes an operation and maintenance password identifier and an operation and maintenance account identifier.

[0176] According to an embodiment of the present disclosure, the information processing device 900 executed by the management server further includes a password identification acquisition module, a password identification storage module, a password identification execution module and a password identification writing module.

[0177] A password identification acquisition module, used to respond to a request instruction for modifying the operation and maintenance password identification of a target server, and acquire the operation and maintenance account information, server identification information, factory customized account information and target operation and maintenance password identification of the target server;

[0178] A password identification saving module is used to save the task carrying the operation and maintenance account information of the target server, the server identification information, the factory customized account information and the target operation and maintenance password identification into the cache queue;

[0179] A password identification execution module is used to read the tasks in the cache queue and perform operations to modify the operation and maintenance password identification according to the task execution; and

[0180] The password identifier writing module is used to write the operation of modifying the operation and maintenance password identifier into the database.

[0181] According to an embodiment of the present disclosure, the information processing device 900 executed by the management server includes an acquisition module, a storage module, a guidance module, a brand logo acquisition module, a running module, and an execution module.

[0182] an acquisition module, configured to acquire, in response to a request instruction for adding operation and maintenance account information for a target server, server identification information, factory customized account information, and operation and maintenance account information associated with the target server, wherein the target server is a server to be added to the management scope of the management server;

[0183] The saving module is used to save the task carrying the operation and maintenance account information, the factory customized account information and the server identification information into the cache queue, so that the target server can obtain the task in the cache queue and execute the task, add the operation and maintenance account information and modify the management authority of the factory customized account information;

[0184] A guiding module, used for the target server to obtain tasks in the cache queue and guide the memory operating system in the cache queue;

[0185] A brand identification acquisition module obtains the brand identification information of the target server through the memory operating system;

[0186] A running module, used to run an account management tool of a target server based on the brand identification information; and

[0187] The execution module is used to execute tasks, use the account management tool to add operation and maintenance account information, and modify the management authority of factory customized account information.

[0188] According to an embodiment of the present disclosure, the server identification information includes one or more of server serial identification information, server MAC address information, and server IP address information.

[0189] According to the embodiments of the present invention, any one or more of the modules, submodules, units, and subunits, or at least part of the functions of any one of them can be implemented in one module. According to the embodiments of the present invention, any one or more of the modules, submodules, units, and subunits can be split into multiple modules for implementation. According to the embodiments of the present invention, any one or more of the modules, submodules, units, and subunits can be at least partially implemented as hardware circuits, such as field programmable gate arrays (FPGAs), programmable logic arrays (PLAs), systems on chips, systems on substrates, systems on packages, application specific integrated circuits (ASICs), or can be implemented by hardware or firmware in any other reasonable way of integrating or packaging the circuit, or implemented in any one of the three implementation methods of software, hardware, and firmware, or in any appropriate combination of any of them. Alternatively, according to the embodiments of the present invention, one or more of the modules, submodules, units, and subunits can be at least partially implemented as computer program modules, and when the computer program modules are run, the corresponding functions can be performed.

[0190] For example, any multiple of the acquisition module 910 and the storage module 920 can be combined in one module / unit / subunit for implementation, or any one of the modules / units / subunits can be split into multiple modules / units / subunits. Alternatively, at least part of the functions of one or more modules / units / subunits in these modules / units / subunits can be combined with at least part of the functions of other modules / units / subunits and implemented in one module / unit / subunit. According to an embodiment of the present disclosure, at least one of the acquisition module 910 and the storage module 920 can be at least partially implemented as a hardware circuit, such as a field programmable gate array (FPGA), a programmable logic array (PLA), a system on a chip, a system on a substrate, a system on a package, an application specific integrated circuit (ASIC), or can be implemented by hardware or firmware such as any other reasonable way of integrating or packaging the circuit, or implemented in any one of the three implementation methods of software, hardware and firmware or in any appropriate combination of any of them. Alternatively, at least one of the acquisition module 910 and the storage module 920 can be at least partially implemented as a computer program module, and when the computer program module is run, the corresponding function can be executed.

[0191] It should be noted that the information processing device part in the embodiments of the present disclosure corresponds to the information processing method part in the embodiments of the present disclosure. The description of the information processing device part specifically refers to the information processing method part, which will not be repeated here.

[0192] Fig.10 A block diagram of a computer system suitable for implementing the method described above according to an embodiment of the present disclosure is schematically shown. Fig.10The computer system shown is only an example and should not bring any limitation to the functions and scope of use of the embodiments of the present disclosure.

[0193] like Fig.10 As shown, the computer system 1000 according to the embodiment of the present disclosure includes a processor 1001, which can perform various appropriate actions and processes according to the program stored in the read-only memory (ROM) 1002 or the program loaded from the storage part 1008 to the random access memory (RAM) 1003. The processor 1001 may include, for example, a general-purpose microprocessor (such as a CPU), an instruction set processor and / or a related chipset and / or a special-purpose microprocessor (for example, an application-specific integrated circuit (ASIC)), etc. The processor 1001 may also include an onboard memory for caching purposes. The processor 1001 may include a single processing unit or multiple processing units for performing different actions of the method flow according to the embodiment of the present disclosure.

[0194] In RAM 1003, various programs and data required for the operation of system 1000 are stored. Processor 1001, ROM 1002 and RAM 1003 are connected to each other through bus 1004. Processor 1001 performs various operations of the method flow according to the embodiment of the present disclosure by executing the program in ROM 1002 and / or RAM 1003. It should be noted that the program can also be stored in one or more memories other than ROM 1002 and RAM 1003. Processor 1001 can also perform various operations of the method flow according to the embodiment of the present disclosure by executing the program stored in the one or more memories.

[0195] According to an embodiment of the present disclosure, the system 1000 may further include an input / output (I / O) interface 1005, which is also connected to the bus 1004. The system 1000 may further include one or more of the following components connected to the I / O interface 1005: an input section 1006 including a keyboard, a mouse, etc.; an output section 1007 including a cathode ray tube (CRT), a liquid crystal display (LCD), etc., and a speaker, etc.; a storage section 1008 including a hard disk, etc.; and a communication section 1009 including a network interface card such as a LAN card, a modem, etc. The communication section 1009 performs communication processing via a network such as the Internet. A drive 1010 is also connected to the I / O interface 1005 as needed. A removable medium 1011, such as a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, etc., is installed on the drive 1010 as needed, so that a computer program read therefrom is installed into the storage section 1008 as needed.

[0196] According to an embodiment of the present disclosure, the method flow according to an embodiment of the present disclosure can be implemented as a computer software program. For example, an embodiment of the present disclosure includes a computer program product, which includes a computer program carried on a computer-readable storage medium, and the computer program contains a program code for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from the network through the communication part 1009, and / or installed from the removable medium 1011. When the computer program is executed by the processor 1001, the above-mentioned functions defined in the system of the embodiment of the present disclosure are executed. According to an embodiment of the present disclosure, the system, equipment, device, module, unit, etc. described above can be implemented by a computer program module.

[0197] The present disclosure also provides a computer-readable storage medium, which may be included in the device / apparatus / system described in the above embodiments; or may exist independently without being assembled into the device / apparatus / system. The above computer-readable storage medium carries one or more programs, and when the above one or more programs are executed, the method according to the embodiment of the present disclosure is implemented.

[0198] According to an embodiment of the present disclosure, the computer-readable storage medium may be a non-volatile computer-readable storage medium. For example, it may include, but is not limited to: a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination thereof. In the present disclosure, a computer-readable storage medium may be any tangible medium containing or storing a program that may be used by or in combination with an instruction execution system, apparatus, or device.

[0199] For example, according to an embodiment of the present disclosure, the computer-readable storage medium may include the ROM 1002 and / or the RAM 1003 described above and / or one or more memories other than the ROM 1002 and the RAM 1003 .

[0200] An embodiment of the present disclosure also includes a computer program product, which includes a computer program, which contains program code for executing the method provided by the embodiment of the present disclosure. When the computer program product is run on an electronic device, the program code is used to enable the electronic device to implement the information processing method provided by the embodiment of the present disclosure and executed by the management server.

[0201] When the computer program is executed by the processor 1001, the above functions defined in the system / device of the embodiment of the present disclosure are executed. According to the embodiment of the present disclosure, the system, device, module, unit, etc. described above can be implemented by a computer program module.

[0202] In one embodiment, the computer program may rely on tangible storage media such as optical storage devices, magnetic storage devices, etc. In another embodiment, the computer program may also be transmitted and distributed in the form of signals on a network medium, and downloaded and installed through the communication part 1009, and / or installed from the removable medium 1011. The program code contained in the computer program may be transmitted using any appropriate network medium, including but not limited to: wireless, wired, etc., or any suitable combination of the above.

[0203] According to an embodiment of the present disclosure, the program code for executing the computer program provided by the embodiment of the present disclosure can be written in any combination of one or more programming languages. Specifically, these computing programs can be implemented using high-level process and / or object-oriented programming languages, and / or assembly / machine languages. Programming languages ​​include, but are not limited to, Java, C++, python, "C" language or similar programming languages. The program code can be executed entirely on the user computing device, partially on the user device, partially on the remote computing device, or entirely on the remote computing device or server. In the case of a remote computing device, the remote computing device can be connected to the user computing device through any type of network, including a local area network (LAN) or a wide area network (WAN), or can be connected to an external computing device (for example, using an Internet service provider to connect through the Internet).

[0204] The flowcharts and block diagrams in the accompanying drawings illustrate the possible architecture, functions and operations of the systems, methods and computer program products according to various embodiments of the present disclosure. In this regard, each box in the flowchart or block diagram may represent a module, a program segment, or a part of a code, and the above-mentioned module, program segment, or a part of the code contains one or more executable instructions for implementing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box may also occur in an order different from that marked in the accompanying drawings. For example, two boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram or flowchart, and the combination of boxes in the block diagram or flowchart, can be implemented with a dedicated hardware-based system that performs the specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions. It can be understood by those skilled in the art that the features recorded in the various embodiments and / or claims of the present disclosure can be combined and / or combined in a variety of ways, even if such a combination or combination is not explicitly recorded in the present disclosure. In particular, without departing from the spirit and teaching of the present disclosure, the features described in the various embodiments and / or claims of the present disclosure may be combined and / or combined in a variety of ways. All of these combinations and / or combinations fall within the scope of the present disclosure.

[0205] The embodiments of the present disclosure are described above. However, these embodiments are only for illustrative purposes and are not intended to limit the scope of the present disclosure. Although the embodiments are described above separately, this does not mean that the measures in the various embodiments cannot be used in combination to advantage. The scope of the present disclosure is defined by the attached claims and their equivalents. Without departing from the scope of the present disclosure, those skilled in the art may make a variety of substitutions and modifications, which should all fall within the scope of the present disclosure.

Claims

1. An information processing method executed by a management server, comprising: In response to a request instruction to add operation and maintenance account information for a target server, obtaining server identification information, factory customized account information, and operation and maintenance account information associated with the target server, wherein the target server is a server to be added to the management scope of the management server; and The task carrying the operation and maintenance account information, the factory customized account information and the server identification information is saved in a cache queue, so that the target server obtains the task in the cache queue, executes the task, adds the operation and maintenance account information and modifies the management authority of the factory customized account information; The management authority for the target server to obtain the task in the cache queue and execute the task, add the operation and maintenance account information, and modify the factory customized account information includes: The target server obtains the tasks in the cache queue and guides the memory operating system in the cache queue; Acquiring brand identification information of the target server through the memory operating system; Based on the brand identification information, running an account management tool of the target server; and Execute the task, use the account management tool to add the operation and maintenance account information, activate management authority, and modify the management authority of the factory customized account information.

2. The method according to claim 1, further comprising: In response to a request instruction to add or modify business account information for the target server, obtaining server identification information, operation and maintenance account information of the target server, and business account information associated with the target server; Saving the task carrying the server identification information, the operation and maintenance account information, and the business account information into the cache queue; Reading the tasks in the cache queue, and performing an operation of adding or modifying business account information based on the tasks; as well as The operation of adding or modifying the business account information is written into the database.

3. The method according to claim 2, wherein: In response to the request instruction to add or modify the service account information for the target server, obtaining the server identification information, operation and maintenance account information, and service account information associated with the target server includes: responding to a request instruction for adding or modifying service account information for the target server, wherein the request instruction carries service category identification information of the target server; and The server identification information, operation and maintenance account information of the target server corresponding to the business category identification information and business account information associated with the target server are obtained.

4. The method according to claim 1, further comprising: In response to a request instruction for modifying the management authority of the factory customized account information of the target server, acquiring server identification information and operation and maintenance account information of the target server; Saving the task carrying the server identification information and the operation and maintenance account information into the cache queue; Reading the tasks in the cache queue, and executing an operation of modifying the management authority of the factory customized account information based on the tasks; as well as The operation of modifying the management authority of the factory customized account information is written into the database.

5. The method according to claim 1, further comprising: In response to a request instruction for modifying the management authority of the factory customized account information of the target server, acquiring server identification information and factory customized account information of the target server; as well as The task carrying the server identification information and the factory customized account information is saved in the cache queue so that the target server reads the task in the cache queue and executes the task, modifies the management authority of the factory customized account information and deletes other account information except the factory customized account information.

6. The method according to claim 1, wherein: The operation and maintenance account information includes an operation and maintenance password identifier and an operation and maintenance account identifier; the method further includes: In response to a request instruction for modifying the operation and maintenance password identifier of the target server, obtaining the operation and maintenance account information, server identification information, factory customized account information and target operation and maintenance password identifier of the target server; The task carrying the operation and maintenance account information, server identification information, factory customized account information and target operation and maintenance password identification of the target server is saved in the cache queue; Reading the tasks in the cache queue, and performing an operation of modifying the operation and maintenance password identifier according to the tasks; and The operation of modifying the operation and maintenance password identifier is written into the database.

7. The method according to claim 1, wherein: The server identification information includes one or more of server serial identification information, server MAC address information, and server IP address information.

8. An information processing device executed by a management server, comprising: an acquisition module, configured to acquire, in response to a request instruction for adding operation and maintenance account information for a target server, server identification information, factory customized account information, and operation and maintenance account information associated with the target server, wherein the target server is a server to be added to the management scope of the management server; and A saving module, used to save the task carrying the operation and maintenance account information, the factory customized account information and the server identification information into a cache queue, so that the target server obtains the task in the cache queue, executes the task, adds the operation and maintenance account information and modifies the management authority of the factory customized account information; Wherein, the management authority for the target server to obtain the task in the cache queue and execute the task, add the operation and maintenance account information, and modify the factory customized account information includes: The target server obtains the tasks in the cache queue and guides the memory operating system in the cache queue; Acquiring brand identification information of the target server through the memory operating system; Based on the brand identification information, running an account management tool of the target server; and Execute the task, use the account management tool to add the operation and maintenance account information, activate management authority, and modify the management authority of the factory customized account information.

9. A computer system comprising: one or more processors; a memory for storing one or more programs, When the one or more programs are executed by the one or more processors, the one or more processors implement the method according to any one of claims 1 to 7.

10. A computer-readable storage medium having executable instructions stored thereon, wherein when the instructions are executed by a processor, the processor is enabled to implement the method according to any one of claims 1 to 7.

11. A computer program product comprising: Computer executable instructions, which when executed are used to implement the method of any one of claims 1 to 7.

Images