User information out-of-band management method and device, server equipment and storage medium

Abstract

The invention provides a user information out-of-band management method and device, server equipment and a storage medium, and relates to the technical field of server management.The method comprises the steps that under the condition that a target service is called, a target service request corresponding to the target service is determined; the target service is used for representing the type of the called service; sending the target service request to a BMC system based on a KCS channel in the daemon process; the BMC system is in communication connection with the server system through a KCS channel, and user information corresponding to the server system is stored in the BMC system; and receiving target user information corresponding to the target service request fed back by the BMC system. The maintenance workload can be reduced, the maintenance operation is simplified, the operation and maintenance difficulty is reduced, and the maintenance efficiency is improved.

Description

Technical Field

[0001] The present invention relates to the technical field of server management, and in particular to a method, device, server equipment and storage medium for out-of-band management of user information. Background Art

[0002] The BMC (Baseboard Management Controller) system is an out-of-band management subsystem of the server device and is independent of the server system. The BMC system automatically starts after the server device is powered on, provides management services such as the server device's assets, firmware, and power status, and monitors key indicators such as the server system's power consumption, temperature, and fan speed, making it easier for administrators to confirm server status and troubleshoot problems.

[0003] In existing server devices, the server system and the BMC system each have independent user information and are stored in their respective local file systems. The two sets of user information are independent of each other and do not affect each other. When the administrator maintains the server through the BMC system, if the user information of the server system needs to be maintained, the account information needs to be changed, and the relevant operations of the server system can only be performed after logging into the server system. The maintenance task is large and the maintenance operation is cumbersome, which leads to low maintenance efficiency. Summary of the invention

[0004] The present invention provides a user information out-of-band management method, device, server equipment and storage medium, which are used to solve the defects in the prior art that when maintaining user information of a server system and a BMC system, the maintenance task is large and the maintenance operation is cumbersome, thereby resulting in low maintenance efficiency.

[0005] The present invention provides a user information out-of-band management method, which is applied to a server system, and the method comprises: In the case of calling a target service, determining a target service request corresponding to the target service; the target service is used to characterize the type of the called service; Based on the KCS channel in the daemon process, the target service request is sent to the BMC system; the BMC system is connected to the server system through the KCS channel, and the BMC system stores user information corresponding to the server system; Receive target user information corresponding to the target service request fed back by the BMC system.

[0006] According to the user information out-of-band management method provided by the present invention, the determining of the target service request corresponding to the target service includes: Determine a target service policy corresponding to the target service based on a target configuration file corresponding to the target service; the target service policy is used to characterize a method for acquiring the target user information; Execute the target service strategy and determine the target call function corresponding to the target service; Based on the target call function, a target service request corresponding to the target service is determined.

[0007] According to the user information out-of-band management method provided by the present invention, the target service includes a PAM authentication service; Before calling the target service, the method further includes: In the case where the target service includes a PAM authentication service, a PAM authentication policy based on a BMC system is added to a PAM configuration file corresponding to the PAM authentication service.

[0008] According to the user information out-of-band management method provided by the present invention, the target service also includes an NSS service; Before calling the target service, the method further includes: In the case where the target service includes an NSS service, a second priority data source based on the BMC system is added to an NSS configuration file corresponding to the NSS service.

[0009] The present invention also provides a user information out-of-band management method, which is applied to a BMC system. The method comprises: Receiving a target service request sent by a server system; Determining target user information corresponding to the target service request based on pre-stored user information corresponding to the server system; Based on the KCS channel, the target user information is sent to the server system, and the BMC system is communicatively connected with the server system through the KCS channel.

[0010] According to the user information out-of-band management method provided by the present invention, the determining of the target user information corresponding to the target service request based on the pre-stored user information corresponding to the server system includes: In the case where the target service request is a user authentication request, verifying the information to be verified in the user authentication request based on the pre-stored user information corresponding to the server system, and determining the verification result as the target user information corresponding to the user authentication request; In the case where the target service request is a user service request, the target file corresponding to the user service request is determined from the user information, and the target user information corresponding to the user service request is determined based on the target file; the target file includes: a user account file, a user group file or a user password file.

[0011] The present invention also provides a user information out-of-band management device, which is applied to a server system, and the device comprises: A first determination module, configured to determine a target service request corresponding to the target service when a target service is called; A first sending module is used to send the target service request to the BMC system based on the KCS channel in the daemon process; the BMC system is connected to the server system through the KCS channel, and the BMC system stores user information corresponding to the server system; The first receiving module is configured to receive target user information corresponding to the target service request fed back by the BMC system.

[0012] The present invention also provides a user information out-of-band management device, which is applied to a BMC system, and the device comprises: A second receiving module is used to receive a target service request sent by the server system; A second determination module, configured to determine target user information corresponding to the target service request based on pre-stored user information corresponding to the server system; The second sending module is used to send the target user information to the server system based on the KCS channel, and the BMC system is communicatively connected with the server system through the KCS channel.

[0013] The present invention also provides a server device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the computer program, any of the above-mentioned user information out-of-band management methods is implemented.

[0014] The present invention also provides a non-transitory computer-readable storage medium on which a computer program is stored. When the computer program is executed by a processor, the user information out-of-band management method as described above is implemented.

[0015] The present invention also provides a computer program product, comprising a computer program, wherein when the computer program is executed by a processor, the computer program implements any of the above-mentioned user information out-of-band management methods.

[0016] The user information out-of-band management method, device, server equipment and storage medium provided by the present invention, when the server system calls the target service, determines the target service request corresponding to the target service, and sends the target service request to the BMC system through the KVS channel in the daemon process, so that the BMC system determines the target user information corresponding to the target service request from the pre-stored user information corresponding to the server system, and receives the target user information fed back by the BMC system, so that the function of the user information of the server system is not affected after being saved in the BMC system. In the present invention, the BMC system provides out-of-band management of the user information of the server system, so that the administrator can use one account to complete the maintenance of the user information of the server system and the BMC system, reduce the maintenance workload and simplify the maintenance operation, reduce the difficulty of operation and maintenance, and thus improve the maintenance efficiency. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] In order to more clearly illustrate the technical solutions in the present invention or the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0018] Figure 1 This is one of the flow charts of the user information out-of-band management method provided by an embodiment of the present invention.

[0019] Figure 2 It is a schematic diagram of the software architecture of the server system provided by an embodiment of the present invention.

[0020] Figure 3 It is a configuration diagram of the NSS configuration file provided by an embodiment of the present invention.

[0021] Figure 4 This is the second flow chart of the user information out-of-band management method provided by the embodiment of the present invention.

[0022] Figure 5 This is one of the structural schematic diagrams of the user information out-of-band management device provided by the embodiment of the present invention.

[0023] Figure 6 This is the second structural diagram of the user information out-of-band management device provided by the embodiment of the present invention.

[0024] Figure 7 This is one of the structural diagrams of the server device provided in the embodiment of the present invention.

[0025] Figure 8 This is the second structural diagram of the server device provided in the embodiment of the present invention. DETAILED DESCRIPTION

[0026] In order to make the purpose, technical solution and advantages of the present invention clearer, the technical solution of the present invention will be clearly and completely described below in conjunction with the drawings of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0027] In view of the problem in the prior art that the maintenance task of maintaining user information of a server system and a BMC system is large and the maintenance operation is cumbersome, thereby resulting in low maintenance efficiency, an embodiment of the present invention provides a user information out-of-band management method, which is applied to a server system. Figure 1 FIG. 1 is one of the flow charts of the out-of-band user information management method provided by an embodiment of the present invention. Figure 1 As shown, the method includes the following steps 110 to 130.

[0028] Step 110: When calling a target service, determine a target service request corresponding to the target service; the target service is used to characterize the type of the called service.

[0029] The server system includes a PAM (Pluggable Authentication Modules) authentication module and an NSS (Network Security Services) service module. A BMC-based authentication plug-in is inserted into the PAM authentication module to ensure the normal operation of the user authentication function in the server system. A BMC-based plug-in is inserted into the NSS service module so that the server system can support obtaining corresponding data from the BMC system when accessing user information. It should be noted that the user information in the server system is pre-stored in the BMC system. Based on the pluggability of the PAM authentication module and the NSS service module in the server system, the user information exists in the BMC system, which is no different from the user information stored in the local file system of the server system.

[0030] It should be noted that the user information pre-stored in the BMC system by the server system includes user account information, user group information and user account password information.

[0031] It should be noted that the target service is used to characterize the type of service being called, and the target service includes a PAM authentication service or an NSS service. The PAM authentication service is used to perform user authentication verification and belongs to the authentication management type. The NSS service is used to access user information and belongs to the user access type. Figure 2 Schematic diagram of the software architecture of the server system provided by the embodiment of the present invention. Figure 2As shown, when calling the PAM authentication service, it means that the upper-layer software calls the relevant functions in the PAM dynamic library pam_bmc.so based on BMC authentication in the PAM authentication module. When calling the NSS service, it means that the upper-layer software calls the relevant functions in the NSS dynamic library libnss_bmc.so.2 based on BMC in the NSS service module.

[0032] Optionally, the upper layer software may include SSH (Secure Shell), Shell, and other, etc., which is not limited in the embodiment of the present invention.

[0033] In addition, in addition to the PAM authentication service, the PAM authentication module may also include an account management service, a session management service, and a password management service, which is not limited in the embodiment of the present invention.

[0034] After the upper-layer software calls the target service, a target service request corresponding to the target service can be generated. The target service request is an IPMI (Intelligent Platform Management Interface) command, which facilitates the subsequent sending of the target service request to the IPMI interface used by the server system in the BMC system for out-of-band management of user information.

[0035] It should be noted that when the target service is a PAM authentication service, the corresponding target service request includes a user name and password, as well as a corresponding IPMI command. When the target service is an NSS service, the corresponding target service request includes an IPMI command for the target user information to be accessed.

[0036] Furthermore, before calling the target service, the method further includes: In the case where the target service includes a PAM authentication service, a PAM authentication policy based on the BMC system is added to a PAM configuration file corresponding to the PAM authentication service.

[0037] Specifically, since user information is stored in the BMC system, before calling the PAM authentication service, you need to add a PAM authentication policy based on the BMC system to the PAM configuration file to ensure that the server system can authenticate users through the BMC system. Taking the Linux user login module as an example, add a PAM authentication policy based on the BMC system to the PAM configuration file / etc / pam.d / login.

[0038] It should be noted that the PAM authentication module is pluggable, and the pluggability is reflected in: at least one PAM authentication policy and the authentication order of various PAM authentication policies can be customized to be added in the PAM configuration file. For example, a PAM authentication policy based on the local file system and / or a PAM authentication policy based on the BMC system can be added, and the authentication order can be added to first execute the PAM authentication policy based on the local file system, and then execute the PAM authentication policy based on the BMC system, or first execute the PAM authentication policy based on the BMC system, and then execute the PAM authentication policy based on the local file system, etc. In the embodiment of the present invention, the normal operation of the server system authentication function can be guaranteed through the pluggability of the PAM authentication module.

[0039] Furthermore, before calling the target service, the method further includes: In the case where the target service includes an NSS service, a second priority data source based on the BMC system is added to an NSS configuration file corresponding to the NSS service.

[0040] Specifically, since user information is stored in the BMC system, before calling the NSS service, you need to add a second priority data source based on the BMC system in the NSS configuration file / etc / nsswitch.conf. For example, Figure 3 is a schematic diagram of the configuration of the NSS configuration file provided by an embodiment of the present invention, such as Figure 3 As shown, in the NSS configuration file, when retrieving data for user account information passwd, user group information group, and user account password information shadow, the local file system files is used as the first priority data source. Before calling the NSS service, you need to add the BMC system to the NSS configuration file and use the BMC system as the second priority data source when retrieving data for user account information passwd, user group information group, and user account password information shadow, so that when the server system fails to access the local file system to obtain the target user information, it can continue to access the BMC system to obtain the target user information.

[0041] In the embodiment of the present invention, the pluggability of the PAM authentication module and the NSS service module can ensure that functions such as user authentication, user data access, and authority control of the server system operate normally after user information is stored in the BMC system.

[0042] Further, determining a target service request corresponding to the target service includes: Based on the target configuration file corresponding to the target service, determine the target service policy corresponding to the target service; the target service policy is used to characterize the method of obtaining target user information; Execute the target service strategy and determine the target call function corresponding to the target service; Based on the target call function, a target service request corresponding to the target service is determined.

[0043] Specifically, after pre-modifying the PAM configuration file and the NSS configuration file, the corresponding target configuration file can be determined as the PAM configuration file or the NSS configuration file according to the called target service, and the target service policy corresponding to the target service can be determined by reading the target configuration file. The target service policy is used to characterize the acquisition method of the target user information. The target service policy can include policy content and policy execution order, etc. For example, the target service policy includes a PAM authentication policy based on the local file system, and / or a PAM authentication policy, authentication order, and data source retrieval priority based on the BMC system. After determining the target service policy, the target service policy is executed, and the target call function is determined from the target dynamic library corresponding to the target service. According to the target function, the corresponding target service request, i.e., the IPMI command, can be generated. For example, when the target service is a PAM authentication service, the target function can be determined from the PAM dynamic library pam_bmc.so based on BMC authentication as the PAM authentication interface function pam_authenticate(), thereby generating the corresponding PAM service request. For another example, when the target service is the NSS service, the target function can be determined from libnss_bmc.so.2 in the glibc library as the _nss_bmc_getpwnam_r() function, which is used to obtain data records of a specified user name from the password database of the BMC system, and then generate a corresponding NSS service request according to this function.

[0044] Step 120: Send the target service request to the BMC system based on the KCS channel in the daemon process; the BMC system is connected to the server system through the KCS channel, and the BMC system stores user information corresponding to the server system.

[0045] Specifically, a daemon (Name Server BMC client Daemon, nsbcd) is provided in the server system, and the server system can communicate with the BMC system through the daemon. After determining the target service request, the server system can send the target service request (IPMI command) to the BMC system through the KCS channel in the daemon to achieve communication with the BMC system.

[0046] Step 130: Receive target user information corresponding to the target service request fed back by the BMC system.

[0047] Specifically, after the BMC system processes the target service request, the server system may receive the target user information corresponding to the target service request fed back by the BMC system. When the target service is a PAM authentication service, the target user information may include the BMC system's authentication result of the user name and password included in the target service request. When the target service is an NSS service, the target user information may include the BMC system's retrieval result of parsing the target file corresponding to the target service request.

[0048] The user information out-of-band management method provided by the embodiment of the present invention, when the server system calls the target service, determines the target service request corresponding to the target service, and sends the target service request to the BMC system through the KVS channel in the daemon process, so that the BMC system determines the target user information corresponding to the target service request from the pre-stored user information corresponding to the server system, and receives the target user information fed back by the BMC system, so that the function of the user information of the server system is not affected after being saved in the BMC system. In the present invention, the BMC system provides out-of-band management of the user information of the server system, so that the administrator can use one account to complete the maintenance of the user information of the server system and the BMC system, reduce the maintenance workload and simplify the maintenance operation, reduce the difficulty of operation and maintenance, and thus improve the maintenance efficiency.

[0049] The embodiment of the present invention also provides a user information out-of-band management method, which is applied to a BMC system. Figure 4 FIG. 2 is a flow chart of the method for out-of-band management of user information provided by an embodiment of the present invention. Figure 4 As shown, the method includes the following steps 410 to 430.

[0050] Step 410: Receive a target service request sent by the server system.

[0051] Step 420: Determine target user information corresponding to the target service request based on pre-stored user information corresponding to the server system.

[0052] Step 430: Based on the KCS channel, the target user information is sent to the server system, and the BMC system is connected to the server system through the KCS channel.

[0053] Specifically, after the server system sends the target service request, the BMC system can receive the target service request sent by the server system through the KCS channel and parse the IPMI command in the target service request. The BMC system can clarify the request intent of the server system through the IPMI command. Afterwards, the BMC system can determine the target user information corresponding to the target service request from the pre-stored user information corresponding to the server system based on the request intent, and feed back the determined target user information to the server system through the KCS channel to complete the data access function or authentication function of the server system.

[0054] It should be noted that the user information corresponding to the server system is pre-stored in the BMC system. The user information includes user account information, user group information and user account password information. The user account information is stored in the user account file / etc / passwg of the BMC system, the user group information is stored in the user group file / etc / group of the BMC system, and the user account password information is stored in the user password file / etc / shadow of the BMC system. The content format of each file is consistent with the format of the Linux system. In addition, after the BMC system completes the storage of user information, the BMC needs to provide a corresponding data access interface for the server system to use.

[0055] Further, based on the pre-stored user information corresponding to the server system, determining the target user information corresponding to the target service request includes: In the case where the target service request is a user authentication request, verifying the information to be verified in the user authentication request based on the pre-stored user information corresponding to the server system, and determining the verification result as the target user information corresponding to the user authentication request; When the target service request is a user service request, the target file corresponding to the user service request is determined from the user information, and the target user information corresponding to the user service request is determined based on the target file; the target file includes: a user account file, a user group file or a user password file.

[0056] Specifically, if the IPMI command obtained by the BMC system when parsing the target service request is User Authentication, it indicates that the target service request is a user authentication request, and the request intention of the server system is user authentication, that is, the user name and password carried in the target service request are verified. At this time, the BMC system can verify the user name and password according to the pre-stored user information corresponding to the server system to obtain the authentication result.

[0057] If the IPMI command obtained by the BMC system after parsing the target service request is Get User Account Info, GetUser groups Info, or Get User password Info, it indicates that the target service request is a user service request. When the IPMI command is Get User Account Info, it indicates that the request intention of the server system is to obtain user account information. At this time, the BMC system can parse the user account file / etc / passwg to obtain the target user request, which includes the user name, UID (User Identification), GID (Group Identifier), user directory, and Shell type. When the IPMI command is Get User groups Info, it indicates that the request intention of the server system is to obtain user group information. At this time, the BMC system can parse the user group file / etc / group to obtain the target user request, which includes the user group name, GID, and group members. When the IPMI command is Get User passwordInfo, it indicates that the server system's request is intended to obtain user password information. At this time, the BMC system can parse the user password file / etc / shadow to obtain the target user information, which includes all user names, last modification time, password interval, maximum interval and other password policies. In order to ensure the security of the user password, the target user information does not include the user password to prevent the user password from being leaked during the communication between the BMC system and the server system.

[0058] In addition, the target service request may also include IPMI commands related to operations such as changing a password and adding a user. After parsing and obtaining such IPMI commands, the BMC system may execute operations corresponding to the IPMI commands.

[0059] The user information out-of-band management method provided by the embodiment of the present invention stores the user information corresponding to the server system in advance in the BMC system, and provides the server system with a corresponding data service interface. After receiving the target service request sent by the server system, the target user information is determined from the pre-stored user information corresponding to the server system by parsing the request intent corresponding to the target service request, and is fed back to the server system through the KCS channel, thereby realizing out-of-band management of the user information corresponding to the server system without logging into the server system. On this basis, the user information corresponding to the BMC system and the server system can be integrated and merged to realize the user unification of the BMC system and the server system, reduce the amount of user information maintained by the administrator, thereby reducing the maintenance workload and reducing the difficulty of operation and maintenance, and achieving the purpose of improving maintenance efficiency.

[0060] The user information out-of-band management device provided by the present invention is described below. The user information out-of-band management device described below and the user information out-of-band management method described above can be referenced to each other.

[0061] The embodiment of the present invention provides a user information out-of-band management device, which is applied to a server system. Figure 5 FIG. 1 is a schematic diagram of a structure of a user information out-of-band management device provided by an embodiment of the present invention. Figure 5 As shown, the user information out-of-band management device 500 includes: a first determining module 510 , a first sending module 520 and a first receiving module 530 .

[0062] The first determining module 510 is used to determine a target service request corresponding to the target service when the target service is called.

[0063] The first sending module 520 is used to send the target service request to the BMC system based on the KCS channel in the daemon process; the BMC system is connected to the server system through the KCS channel, and the BMC system stores user information corresponding to the server system.

[0064] The first receiving module 530 is configured to receive target user information corresponding to the target service request fed back by the BMC system.

[0065] The user information out-of-band management device provided by the embodiment of the present invention, when the server system calls the target service, determines the target service request corresponding to the target service, and sends the target service request to the BMC system through the KVS channel in the daemon process, so that the BMC system determines the target user information corresponding to the target service request from the pre-stored user information corresponding to the server system, and receives the target user information fed back by the BMC system, so that the function of the user information of the server system is not affected after being saved in the BMC system. In the present invention, the BMC system provides out-of-band management of the user information of the server system, so that the administrator can use one account to complete the maintenance of the user information of the server system and the BMC system, reduce the maintenance workload and simplify the maintenance operation, reduce the difficulty of operation and maintenance, and thus improve the maintenance efficiency.

[0066] Optionally, the first determining module 510 is specifically configured to: Determine a target service policy corresponding to the target service based on a target configuration file corresponding to the target service; the target service policy is used to characterize a method for acquiring the target user information; Execute the target service strategy and determine the target call function corresponding to the target service; Based on the target call function, a target service request corresponding to the target service is determined.

[0067] Optionally, the target service includes a PAM authentication service or an NSS service.

[0068] Optionally, the user information out-of-band management device 500 further includes a first configuration module. Before calling the target service, the first configuration module is specifically used to: In the case where the target service includes a PAM authentication service, a PAM authentication policy based on a BMC system is added to a PAM configuration file corresponding to the PAM authentication service.

[0069] Optionally, the user information out-of-band management device 500 further includes a second configuration module. Before calling the target service, the second configuration module is specifically used to: In the case where the target service includes an NSS service, a second priority data source based on the BMC system is added to an NSS configuration file corresponding to the NSS service.

[0070] The embodiment of the present invention also provides a user information out-of-band management device, which is applied to a BMC system. Figure 6 FIG. 2 is a second structural diagram of the user information out-of-band management device provided by an embodiment of the present invention. Figure 6 As shown, the user information out-of-band management device 600 includes: a second receiving module 610 , a second determining module 620 and a second sending module 630 .

[0071] The second receiving module 610 is used to receive a target service request sent by the server system.

[0072] The second determination module 620 is used to determine the target user information corresponding to the target service request based on the pre-stored user information corresponding to the server system.

[0073] The second sending module 630 is used to send the target user information to the server system based on the KCS channel. The BMC system is connected to the server system through the KCS channel.

[0074] The user information out-of-band management device provided by the embodiment of the present invention stores the user information corresponding to the server system in advance in the BMC system, and provides the server system with a corresponding data service interface. After receiving the target service request sent by the server system, the target user information is determined from the pre-stored user information corresponding to the server system by parsing the request intent corresponding to the target service request, and is fed back to the server system through the KCS channel, thereby realizing out-of-band management of the user information corresponding to the server system without logging into the server system. On this basis, the user information corresponding to the BMC system and the server system can be integrated and merged to realize the user unification of the BMC system and the server system, reduce the amount of user information maintained by the administrator, thereby reducing the maintenance workload and reducing the difficulty of operation and maintenance, and achieving the purpose of improving maintenance efficiency.

[0075] Optionally, the second determining module 620 is specifically configured to: In the case where the target service request is a user authentication request, verifying the information to be verified in the user authentication request based on the pre-stored user information corresponding to the server system, and determining the verification result as the target user information corresponding to the user authentication request; In the case where the target service request is a user service request, the target file corresponding to the user service request is determined from the user information, and the target user information corresponding to the user service request is determined based on the target file; the target file includes: a user account file, a user group file or a user password file.

[0076] Figure 7 is one of the structural diagrams of the server device provided in the embodiment of the present invention, such as Figure 7 As shown, the electronic device may include: a processor 710, a communication interface 720, a memory 730 and a communication bus 740, wherein the processor 710, the communication interface 720 and the memory 730 communicate with each other through the communication bus 740. The processor 710 may call the logic instructions in the memory 730 to execute the user information out-of-band management method, which includes: In the case of calling a target service, determining a target service request corresponding to the target service; the target service is used to characterize the type of the called service; Based on the KCS channel in the daemon process, the target service request is sent to the BMC system; the BMC system is connected to the server system through the KCS channel, and the BMC system stores user information corresponding to the server system; Receiving target user information corresponding to the target service request fed back by the BMC system; or,

[0077] Receiving a target service request sent by a server system; Determining target user information corresponding to the target service request based on pre-stored user information corresponding to the server system; Based on the KCS channel, the target user information is sent to the server system, and the BMC system is communicatively connected with the server system through the KCS channel.

[0078] In addition, the logic instructions in the above-mentioned memory 730 can be implemented in the form of a software functional unit and can be stored in a computer-readable storage medium when it is sold or used as an independent product. Based on this understanding, the technical solution of the present invention is essentially or the part that contributes to the prior art or the part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including a number of instructions to enable a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the methods of each embodiment of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), disk or optical disk and other media that can store program codes.

[0079] Figure 8 FIG. 2 is a second structural diagram of a server device provided in an embodiment of the present invention. Figure 8 As shown, the BMC system is connected to the server system through the KCS channel.

[0080] On the other hand, the present invention further provides a computer program product, the computer program product includes a computer program, the computer program can be stored in a non-transitory computer-readable storage medium, when the computer program is executed by a processor, the computer can execute the user information out-of-band management method provided by the above methods, the method includes: In the case of calling a target service, determining a target service request corresponding to the target service; the target service is used to characterize the type of the called service; Based on the KCS channel in the daemon process, the target service request is sent to the BMC system; the BMC system is connected to the server system through the KCS channel, and the BMC system stores user information corresponding to the server system; Receiving target user information corresponding to the target service request fed back by the BMC system; or,

[0081] Receiving a target service request sent by a server system; Determining target user information corresponding to the target service request based on pre-stored user information corresponding to the server system; Based on the KCS channel, the target user information is sent to the server system, and the BMC system is communicatively connected with the server system through the KCS channel.

[0082] In another aspect, the present invention further provides a non-transitory computer-readable storage medium having a computer program stored thereon, and when the computer program is executed by a processor, the method for out-of-band management of user information provided by the above methods is implemented, and the method includes: In the case of calling a target service, determining a target service request corresponding to the target service; the target service is used to characterize the type of the called service; Based on the KCS channel in the daemon process, the target service request is sent to the BMC system; the BMC system is connected to the server system through the KCS channel, and the BMC system stores user information corresponding to the server system; Receiving target user information corresponding to the target service request fed back by the BMC system; or,

[0083] Receiving a target service request sent by a server system; Determining target user information corresponding to the target service request based on pre-stored user information corresponding to the server system; Based on the KCS channel, the target user information is sent to the server system, and the BMC system is communicatively connected with the server system through the KCS channel.

[0084] The device embodiments described above are merely illustrative, wherein the units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, i.e., they may be located in one place, or they may be distributed on multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the scheme of this embodiment. Those of ordinary skill in the art may understand and implement it without creative effort.

[0085] Through the description of the above implementation modes, those skilled in the art can clearly understand that each implementation mode can be implemented by means of software plus a necessary general hardware platform, or of course by hardware. Based on such an understanding, the above technical solution can essentially or in other words be embodied in the form of a software product that contributes to the prior art. The computer software product can be stored in a computer-readable storage medium, such as ROM / RAM, a magnetic disk, an optical disk, etc., and includes a number of instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to execute the methods of each embodiment or some parts of the embodiment.

[0086] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. A user information out-of-band management method, characterized in that: Applied to a server system, the method comprises: In the case of calling a target service, determining a target service request corresponding to the target service; the target service is used to characterize the type of the called service; Based on the KCS channel in the daemon process, the target service request is sent to the BMC system; the BMC system is connected to the server system through the KCS channel, and the BMC system stores user information corresponding to the server system; Receive target user information corresponding to the target service request fed back by the BMC system.

2. The user information out-of-band management method according to claim 1, characterized in that: The determining the target service request corresponding to the target service includes: Determine a target service policy corresponding to the target service based on a target configuration file corresponding to the target service; the target service policy is used to characterize a method for acquiring the target user information; Execute the target service strategy and determine the target call function corresponding to the target service; Based on the target call function, a target service request corresponding to the target service is determined.

3. The user information out-of-band management method according to claim 1 or 2, characterized in that: The target service includes a PAM authentication service; Before calling the target service, the method further includes: In the case where the target service includes a PAM authentication service, a PAM authentication policy based on a BMC system is added to a PAM configuration file corresponding to the PAM authentication service.

4. The user information out-of-band management method according to claim 3, characterized in that: The target service also includes NSS service; Before calling the target service, the method further includes: In the case where the target service includes an NSS service, a second priority data source based on the BMC system is added to an NSS configuration file corresponding to the NSS service.

5. A method for out-of-band management of user information, characterized in that: Applied to a BMC system, the method includes: Receiving a target service request sent by a server system; Determining target user information corresponding to the target service request based on pre-stored user information corresponding to the server system; Based on the KCS channel, the target user information is sent to the server system, and the BMC system is communicatively connected with the server system through the KCS channel.

6. The user information out-of-band management method according to claim 5, characterized in that: The determining, based on the pre-stored user information corresponding to the server system, the target user information corresponding to the target service request includes: In the case where the target service request is a user authentication request, verifying the information to be verified in the user authentication request based on the pre-stored user information corresponding to the server system, and determining the verification result as the target user information corresponding to the user authentication request; In the case where the target service request is a user service request, the target file corresponding to the user service request is determined from the user information, and the target user information corresponding to the user service request is determined based on the target file; the target file includes: a user account file, a user group file or a user password file.

7. A user information out-of-band management device, characterized in that: Applied to a server system, the device comprises: A first determination module, configured to determine a target service request corresponding to the target service when a target service is called; A first sending module is used to send the target service request to the BMC system based on the KCS channel in the daemon process; the BMC system is connected to the server system through the KCS channel, and the BMC system stores user information corresponding to the server system; The first receiving module is used to receive the target user information corresponding to the target service request fed back by the BMC system.

8. A user information out-of-band management device, characterized in that: Applied to a BMC system, the device comprises: A second receiving module is used to receive a target service request sent by the server system; A second determination module, configured to determine target user information corresponding to the target service request based on pre-stored user information corresponding to the server system; The second sending module is used to send the target user information to the server system based on the KCS channel, and the BMC system is communicatively connected with the server system through the KCS channel.

9. A server device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the computer program, the out-of-band management method for user information according to any one of claims 1 to 4, or the out-of-band management method for user information according to claim 5 or 6 is implemented.

10. A non-transitory computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the method for out-of-band management of user information as claimed in any one of claims 1 to 4 or the method for out-of-band management of user information as claimed in claim 5 or 6 is implemented.

Images