A BMC management method, device, equipment and machine-readable storage medium

Abstract

The present disclosure provides a BMC management method, device, equipment and machine-readable storage medium, the method comprising: receiving a command issued using a domain user identity, determining whether the command is an IPMI command; if the command is an IPMI command, verifying the legitimacy of the domain user, creating an associated temporary BMC user for the domain user that has passed the verification; executing the IPMI command through the temporary BMC user, and deleting the temporary BMC user after the execution is completed. Through the technical solution of the present disclosure, after receiving an IPMI command issued using a domain user identity, if the domain user verification is legal, an associated temporary BMC user is established for it, so that it passes the user verification related to the IPMI command, thereby realizing the smooth execution of the IPMI command issued by the domain user.

Description

Technical Field

[0001] The present disclosure relates to the field of communication technology, and in particular to a BMC management method, apparatus, device, and machine-readable storage medium. Background Art

[0002] BMC (Baseboard Management Controller) is mainly used to perform remote management and control of servers in an out-of-band manner. IPMI (Intelligent Platform Management Interface) is an industrial standard for managing peripheral devices used in enterprise systems based on Intel architecture. AD (Active Directory) server is a directory service for Windows Standard Server, Windows Enterprise Server, and Windows Datacenter Server.

[0003] Users can use IPMI commands to remotely obtain server hardware information and monitor health status. IPMI functions are completed by sending commands to the BMC. In order to ensure the permission policy and security management of each user, AD servers are generally used to store domain users for unified management. However, the IPMI authentication mechanism is to send the user name to the BMC through the client, and the BMC returns the password corresponding to the user. The client then verifies the password returned by the BMC and the password sent. If the BMC local user and password are used to send IPMI commands on the client, the authentication can be successful and the server information can be obtained. However, when the domain user and password are used, the BMC cannot obtain the domain user password, so the IPMI command will fail to authenticate and the server information cannot be obtained. Summary of the invention

[0004] In view of this, the present disclosure provides a BMC management method, device, electronic device, and machine-readable storage medium to improve the problem that domain users cannot be authenticated during the execution of IPMI commands.

[0005] The specific technical solutions are as follows:

[0006] The present disclosure provides a BMC management method, which is applied to a server device. The method includes: receiving a command issued by a domain user identity, and determining whether the command is an IPMI command; if the command is an IPMI command, verifying the legitimacy of the domain user, and creating an associated temporary BMC user for the domain user that passes the verification; executing the IPMI command through the temporary BMC user, and deleting the temporary BMC user after the execution is completed.

[0007] As a technical solution, if the command is an IPMI command, the legitimacy of the domain user is verified, and for the domain user that passes the verification, an associated temporary BMC user is created, including: if the command is an IPMI command, the legitimacy of the domain user is verified, and for the domain user that passes the verification, a RESTFUL command is called to create a temporary BMC user associated with the domain user, and the temporary BMC user has the authority to execute IPMI commands.

[0008] As a technical solution, executing the IPMI command through the temporary BMC user and deleting the temporary BMC user after execution includes: calling the IPMI command, using the temporary BMC user to verify authority, executing the IPMI command to obtain server information, returning the server information, and deleting the temporary BMC user.

[0009] As a technical solution, if the command is a non-IPMI command, RESTFUL or Redfish is called to execute the command.

[0010] The present disclosure also provides a BMC management device, which is applied to a server device. The device includes: a receiving module, which is used to receive a command issued using a domain user identity and determine whether the command is an IPMI command; a user module, which is used to verify the legitimacy of the domain user if the command is an IPMI command, and to create an associated temporary BMC user for the domain user who passes the verification; and an execution module, which is used to execute the IPMI command through the temporary BMC user and delete the temporary BMC user after the execution is completed.

[0011] As a technical solution, if the command is an IPMI command, the legitimacy of the domain user is verified, and for the domain user that passes the verification, an associated temporary BMC user is created, including: if the command is an IPMI command, the legitimacy of the domain user is verified, and for the domain user that passes the verification, a RESTFUL command is called to create a temporary BMC user associated with the domain user, and the temporary BMC user has the authority to execute IPMI commands.

[0012] As a technical solution, executing the IPMI command through the temporary BMC user and deleting the temporary BMC user after execution includes: calling the IPMI command, using the temporary BMC user to verify authority, executing the IPMI command to obtain server information, returning the server information, and deleting the temporary BMC user.

[0013] As a technical solution, if the command is a non-IPMI command, RESTFUL or Redfish is called to execute the command.

[0014] The present disclosure also provides an electronic device, including a processor and a machine-readable storage medium, wherein the machine-readable storage medium stores machine-executable instructions that can be executed by the processor, and the processor executes the machine-executable instructions to implement the aforementioned BMC management method.

[0015] The present disclosure also provides a machine-readable storage medium, wherein the machine-readable storage medium stores machine-executable instructions. When the machine-executable instructions are called and executed by a processor, the machine-executable instructions prompt the processor to implement the aforementioned BMC management method.

[0016] The above technical solution provided by the present disclosure brings at least the following beneficial effects:

[0017] After receiving the IPMI command issued by the domain user, if the domain user is authenticated as legal, a temporary BMC user is associated with it so that it passes the user authentication related to the IPMI command, thereby realizing the smooth execution of the IPMI command issued by the domain user. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] In order to more clearly illustrate the embodiments of the present disclosure or the technical solutions in the prior art, the drawings required for use in the embodiments of the present disclosure or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments recorded in the present disclosure. For ordinary technicians in this field, other drawings can also be obtained based on these drawings of the embodiments of the present disclosure.

[0019] Figure 1 is a flow chart of a BMC management method in one embodiment of the present disclosure;

[0020] Figure 2 is a structural diagram of a BMC management device in one embodiment of the present disclosure;

[0021] Figure 3 It is a hardware structure diagram of an electronic device in one embodiment of the present disclosure. DETAILED DESCRIPTION

[0022] The terms used in the embodiments of the present disclosure are only for the purpose of describing specific embodiments, rather than limiting the present disclosure. The singular forms of "a", "said" and "the" used in the present disclosure and claims are also intended to include plural forms, unless the context clearly indicates other meanings. It should also be understood that the term "and / or" used herein refers to any or all possible combinations of one or more associated listed items.

[0023] It should be understood that although the terms first, second, third, etc. may be used to describe various information in the embodiments of the present disclosure, these information should not be limited to these terms. These terms are only used to distinguish the same type of information from each other. For example, without departing from the scope of the present disclosure, the first information may also be referred to as the second information, and similarly, the second information may also be referred to as the first information. Depending on the context, in addition, the word "if" used may be interpreted as "at the time of" or "when" or "in response to determining".

[0024] The present disclosure provides a BMC management method, device, electronic device, and machine-readable storage medium to improve the problem that domain users cannot be authenticated during the above IPMI command process.

[0025] Specifically, the technical solution is as described below.

[0026] In one embodiment, the present disclosure provides a BMC management method, which is applied to a server device, and the method includes: receiving a command issued using a domain user identity, and determining whether the command is an IPMI command; if the command is an IPMI command, verifying the legitimacy of the domain user, and for the domain user that passes the verification, creating an associated temporary BMC user; executing the IPMI command through the temporary BMC user, and deleting the temporary BMC user after the execution is completed.

[0027] Specifically, Figure 1 , including the following steps:

[0028] Step S11, receiving a command issued using a domain user identity, and determining whether the command is an IPMI command;

[0029] Step S12: if the command is an IPMI command, verify the legitimacy of the domain user, and create an associated temporary BMC user for the domain user that passes the verification;

[0030] Step S13, executing the IPMI command through the temporary BMC user, and deleting the temporary BMC user after the execution is completed.

[0031] After receiving the IPMI command issued by the domain user, if the domain user is authenticated as legal, a temporary BMC user is associated with it so that it passes the user authentication related to the IPMI command, thereby realizing the smooth execution of the IPMI command issued by the domain user.

[0032] In one implementation, if the command is an IPMI command, then verifying the legitimacy of the domain user, and for the domain user that has passed the verification, creating an associated temporary BMC user, includes: if the command is an IPMI command, then verifying the legitimacy of the domain user, and for the domain user that has passed the verification, calling a RESTFUL command to create a temporary BMC user associated with the domain user, and enabling the temporary BMC user to have permission to execute IPMI commands.

[0033] In one embodiment, executing the IPMI command through the temporary BMC user and deleting the temporary BMC user after execution includes: calling the IPMI command, using the temporary BMC user to verify authority, executing the IPMI command to obtain server information, returning the server information, and deleting the temporary BMC user.

[0034] In one implementation, if the command is a non-IPMI command, RESTFUL or Redfish is called to execute the command.

[0035] In one embodiment, the present disclosure also provides a BMC management device, such as Figure 2 , applied to a server device, the device comprises: a receiving module 21, used to receive a command issued using a domain user identity, and determine whether the command is an IPMI command; a user module 22, used to verify the legitimacy of the domain user if the command is an IPMI command, and to create an associated temporary BMC user for the domain user that passes the verification; an execution module 23, used to execute the IPMI command through the temporary BMC user, and delete the temporary BMC user after the execution is completed.

[0036] In one implementation, if the command is an IPMI command, then verifying the legitimacy of the domain user, and for the domain user that has passed the verification, creating an associated temporary BMC user, includes: if the command is an IPMI command, then verifying the legitimacy of the domain user, and for the domain user that has passed the verification, calling a RESTFUL command to create a temporary BMC user associated with the domain user, and enabling the temporary BMC user to have permission to execute IPMI commands.

[0037] In one embodiment, executing the IPMI command through the temporary BMC user and deleting the temporary BMC user after execution includes: calling the IPMI command, using the temporary BMC user to verify authority, executing the IPMI command to obtain server information, returning the server information, and deleting the temporary BMC user.

[0038] In one implementation, if the command is a non-IPMI command, RESTFUL or Redfish is called to execute the command.

[0039] The device implementation is the same as or similar to the corresponding method implementation, and will not be described in detail here.

[0040] In one embodiment, the present disclosure provides an electronic device, including a processor and a machine-readable storage medium, wherein the machine-readable storage medium stores machine-executable instructions that can be executed by the processor, and the processor executes the machine-executable instructions to implement the aforementioned BMC management method. From a hardware perspective, the hardware architecture diagram can be found in Figure 3 shown.

[0041] In one embodiment, the present disclosure provides a machine-readable storage medium storing machine-executable instructions. When the machine-executable instructions are called and executed by a processor, the machine-executable instructions prompt the processor to implement the aforementioned BMC management method.

[0042] Here, the machine-readable storage medium may be any electronic, magnetic, optical or other physical storage device that may contain or store information, such as executable instructions, data, etc. For example, the machine-readable storage medium may be: RAM (RadomAccess Memory), volatile memory, non-volatile memory, flash memory, storage drive (such as hard disk drive), solid state drive, any type of storage disk (such as CD, DVD, etc.), or similar storage medium, or a combination thereof.

[0043] The systems, devices, modules or units described in the above embodiments may be implemented by computer chips or entities, or by products with certain functions. A typical implementation device is a computer, which may be in the form of a personal computer, a laptop computer, a cellular phone, a camera phone, a smart phone, a personal digital assistant, a media player, a navigation device, an email transceiver, a game console, a tablet computer, a wearable device or a combination of any of these devices.

[0044] For the convenience of description, the above device is described in terms of functions and is divided into various units and described separately. Of course, when implementing the present disclosure, the functions of each unit can be implemented in the same or multiple software and / or hardware.

[0045] It will be appreciated by those skilled in the art that the embodiments of the present disclosure may be provided as methods, systems, or computer program products. Therefore, the present disclosure may be provided in the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Furthermore, the embodiments of the present disclosure may be provided in the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0046] The present disclosure is described with reference to flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to embodiments of the present disclosure. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0047] Moreover, these computer program instructions can also be stored in a computer-readable memory that can guide a computer or other programmable data processing device to work in a specific manner, so that the instructions stored in the computer-readable memory produce a product including an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 The function specified in one or more boxes.

[0048] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for executing on the computer or other programmable device to implement the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0049] It will be appreciated by those skilled in the art that the embodiments of the present disclosure may be provided as methods, systems or computer program products. Therefore, the present disclosure may be in the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the present disclosure may be in the form of a computer program product implemented on one or more computer-usable storage media (which may include but are not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0050] The above description is only an embodiment of the present disclosure and is not intended to limit the present disclosure. For those skilled in the art, the present disclosure may have various modifications and variations. Any modification, equivalent substitution, improvement, etc. made within the spirit and principle of the present disclosure shall be included in the scope of the claims of the present disclosure.

Claims

1. A BMC management method, characterized in that: Applied to a server device, the method comprises: Receive a command issued by a domain user and determine whether the command is an IPMI command; If the command is an IPMI command, the legitimacy of the domain user is verified, and for the domain user that passes the verification, an associated temporary BMC user is created; The IPMI command is executed through the temporary BMC user, and the temporary BMC user is deleted after the execution is completed.

2. The method according to claim 1, characterized in that If the command is an IPMI command, verify the legitimacy of the domain user, and for the domain user that passes the verification, create an associated temporary BMC user, including: If the command is an IPMI command, the legitimacy of the domain user is verified. For a domain user that passes the verification, a RESTFUL command is called to create a temporary BMC user associated with the domain user, and the temporary BMC user is given the authority to execute the IPMI command.

3. The method according to claim 2, characterized in that The executing the IPMI command through the temporary BMC user and deleting the temporary BMC user after the execution is completed includes: Call IPMI commands, use temporary BMC user to verify permissions, execute IPMI commands to obtain server information, return server information, and delete the temporary BMC user.

4. The method according to claim 3, characterized in that If the command is a non-IPMI command, RESTFUL or Redfish is called to execute the command.

5. A BMC management device, characterized in that: Applied to a server device, the device comprises: A receiving module, used to receive a command issued using a domain user identity and determine whether the command is an IPMI command; A user module, used for verifying the legitimacy of the domain user if the command is an IPMI command, and creating an associated temporary BMC user for a domain user that passes the verification; The execution module is used to execute the IPMI command through the temporary BMC user and delete the temporary BMC user after the execution is completed.

6. The device according to claim 5, characterized in that If the command is an IPMI command, verify the legitimacy of the domain user, and for the domain user that passes the verification, create an associated temporary BMC user, including: If the command is an IPMI command, the legitimacy of the domain user is verified. For a domain user that passes the verification, a RESTFUL command is called to create a temporary BMC user associated with the domain user, and the temporary BMC user is given the authority to execute the IPMI command.

7. The device according to claim 6, characterized in that The executing the IPMI command through the temporary BMC user and deleting the temporary BMC user after the execution is completed includes: Call IPMI commands, use temporary BMC user to verify permissions, execute IPMI commands to obtain server information, return server information, and delete the temporary BMC user.

8. The device according to claim 7, characterized in that If the command is a non-IPMI command, RESTFUL or Redfish is called to execute the command.

9. An electronic device, characterized in that: include: A processor and a machine-readable storage medium, wherein the machine-readable storage medium stores machine-executable instructions that can be executed by the processor, and the processor executes the machine-executable instructions to implement the method described in any one of claims 1 to 4.

10. A machine-readable storage medium, characterized in that: The machine-readable storage medium stores machine-executable instructions, and when the machine-executable instructions are called and executed by a processor, the machine-executable instructions prompt the processor to implement any one of the methods of claims 1-4.

Images