User information out-of-band management methods, devices, server equipment, and storage media

Abstract

This invention provides a method, apparatus, server device, and storage medium for out-of-band user information management, relating to the field of server management technology. The method includes: determining a target service request corresponding to the target service when a target service is invoked; the target service is used to characterize the type of service invoked; the target service request is sent to the BMC system based on the KCS channel in the daemon process; the BMC system communicates with the server system through the KCS channel, and the BMC system stores user information corresponding to the server system; and the BMC system receives the target user information corresponding to the target service request from the target user. This invention can reduce maintenance workload and simplify maintenance operations, lower the difficulty of operation and maintenance, and thus improve maintenance efficiency.

Description

Technical Field

[0001] This invention relates to the field of server management technology, and in particular to a method, apparatus, server equipment, and storage medium for out-of-band management of user information. Background Technology

[0002] The BMC (Baseboard Management Controller) system is an out-of-band management subsystem for server devices, and it operates independently of the server system. The BMC system automatically starts after the server device is powered on, providing management services for server assets, firmware, power status, etc., and monitoring key indicators such as power consumption, temperature, and fan speed, facilitating administrators in confirming server status and troubleshooting.

[0003] In existing server equipment, the server system and the BMC system each have independent user information, stored in their respective local file systems. These two sets of user information are independent and do not affect each other. When administrators maintain the server through the BMC system, if they need to update the user information of the server system, they must change the account information and log back into the server system before performing related operations. This results in a large workload and cumbersome operations, leading to low maintenance efficiency. Summary of the Invention

[0004] This invention provides a method, apparatus, server equipment, and storage medium for out-of-band management of user information, in order to solve the defects in the prior art where the maintenance of user information in server systems and BMC systems is characterized by a large workload and cumbersome maintenance operations, resulting in low maintenance efficiency.

[0005] This invention provides a method for out-of-band management of user information, applied to a server system, the method comprising:

[0006] When a target service is invoked, the target service request corresponding to the target service is determined; the target service is used to characterize the type of service invoked.

[0007] Based on the KCS channel in the daemon process, the target service request is sent to the BMC system; the BMC system communicates with the server system through the KCS channel, and the BMC system stores the user information corresponding to the server system;

[0008] Receive the target user information corresponding to the target service request fed back by the BMC system.

[0009] According to the out-of-band management method for user information provided by the present invention, determining the target service request corresponding to the target service includes:

[0010] Based on the target configuration file corresponding to the target service, a target service strategy corresponding to the target service is determined; the target service strategy is used to characterize the method of obtaining the target user information.

[0011] Execute the target service strategy and determine the target call function corresponding to the target service;

[0012] Based on the target call function, the target service request corresponding to the target service is determined.

[0013] According to the out-of-band management method for user information provided by the present invention, the target service includes PAM authentication service;

[0014] Before invoking the target service, the method further includes:

[0015] If the target service includes a PAM authentication service, add a PAM authentication policy based on the BMC system to the PAM configuration file corresponding to the PAM authentication service.

[0016] According to the out-of-band user information management method provided by the present invention, the target service further includes an NSS service;

[0017] Before invoking the target service, the method further includes:

[0018] If the target service includes an NSS service, add a second priority data source based on the BMC system to the NSS configuration file corresponding to the NSS service.

[0019] This invention also provides a method for out-of-band management of user information, applied to a BMC system, the method comprising:

[0020] Receive the target service request sent by the server system;

[0021] Based on the pre-stored user information corresponding to the server system, determine the target user information corresponding to the target service request;

[0022] Based on the KCS channel, the target user information is sent to the server system, and the BMC system communicates with the server system through the KCS channel.

[0023] According to the out-of-band user information management method provided by the present invention, determining the target user information corresponding to the target service request based on the pre-stored user information corresponding to the server system includes:

[0024] When the target service request is a user authentication request, the information to be verified in the user authentication request is verified based on the user information corresponding to the pre-stored server system, and the verification result is determined as the target user information corresponding to the user authentication request.

[0025] If the target service request is a user service request, the target file corresponding to the user service request is determined from the user information, and the target user information corresponding to the user service request is determined based on the target file; the target file includes: user account file, user group file or user password file.

[0026] The present invention also provides a user information out-of-band management device, applied to a server system, the device comprising:

[0027] The first determining module is used to determine the target service request corresponding to the target service when the target service is invoked;

[0028] The first sending module is used to send the target service request to the BMC system based on the KCS channel in the daemon process; the BMC system communicates with the server system through the KCS channel, and the BMC system stores user information corresponding to the server system;

[0029] The first receiving module is used to receive the target user information corresponding to the target service request fed back by the BMC system.

[0030] The present invention also provides a user information out-of-band management device, applied to a BMC system, the device comprising:

[0031] The second receiving module is used to receive target service requests sent by the server system.

[0032] The second determining module is used to determine the target user information corresponding to the target service request based on the user information corresponding to the pre-stored server system.

[0033] The second sending module is used to send the target user information to the server system based on the KCS channel, and the BMC system communicates with the server system through the KCS channel.

[0034] The present invention also provides a server device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the computer program to implement the user information out-of-band management method as described above.

[0035] The present invention also provides a non-transitory computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the out-of-band user information management method as described above.

[0036] The present invention also provides a computer program product, including a computer program that, when executed by a processor, implements the user information out-of-band management method as described above.

[0037] This invention provides a method, apparatus, server device, and storage medium for out-of-band management of user information. When a server system invokes a target service, it determines the target service request and sends it to the BMC system via the KVS channel in the daemon process. The BMC system then determines the target user information corresponding to the target service request from pre-stored user information corresponding to the server system and receives the target user information from the BMC system. This ensures that the server system's user information remains functionally unaffected after being saved to the BMC system. In this invention, the BMC system provides out-of-band management of the server system's user information, allowing administrators to maintain user information in both the server system and the BMC system using a single account. This reduces maintenance workload, simplifies maintenance operations, lowers operational difficulty, and ultimately improves maintenance efficiency. Attached Figure Description

[0038] To more clearly illustrate the technical solutions in this invention or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are some embodiments of this invention. For those skilled in the art, other drawings can be obtained from these drawings without creative effort.

[0039] Figure 1 This is one of the flowcharts of the user information out-of-band management method provided in the embodiments of the present invention.

[0040] Figure 2 This is a schematic diagram of the software architecture of the server system provided in an embodiment of the present invention.

[0041] Figure 3 This is a configuration diagram of the NSS configuration file provided in an embodiment of the present invention.

[0042] Figure 4 This is the second flowchart of the user information out-of-band management method provided in the embodiments of the present invention.

[0043] Figure 5 This is one of the structural schematic diagrams of the user information out-of-band management device provided in the embodiments of the present invention.

[0044] Figure 6This is the second structural schematic diagram of the user information out-of-band management device provided in the embodiments of the present invention.

[0045] Figure 7 This is one of the structural schematic diagrams of the server device provided in the embodiments of the present invention.

[0046] Figure 8 This is the second structural schematic diagram of the server device provided in the embodiment of the present invention. Detailed Implementation

[0047] To make the objectives, technical solutions, and advantages of this invention clearer, the technical solutions of this invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some, not all, of the embodiments of this invention. All other embodiments obtained by those skilled in the art based on the embodiments of this invention without creative effort are within the scope of protection of this invention.

[0048] To address the problem of high maintenance workload and cumbersome operations in existing technologies for maintaining user information in server systems and BMC systems, resulting in low maintenance efficiency, this invention provides an out-of-band user information management method applied to server systems. Figure 1 This is one of the flowcharts illustrating the out-of-band management method for user information provided in this embodiment of the invention, such as... Figure 1 As shown, the method includes steps 110 to 130.

[0049] Step 110: When calling a target service, determine the target service request corresponding to the target service; the target service is used to characterize the type of service being called.

[0050] The server system includes a PAM (Pluggable Authentication Modules) authentication module and an NSS (Network Security Services) service module. The PAM authentication module incorporates a BMC-based authentication plugin to ensure the proper functioning of user authentication within the server system. The NSS service module incorporates a BMC-based plugin, enabling the server system to retrieve corresponding data from the BMC system when accessing user information. It should be noted that user information is pre-stored in the BMC system. Due to the pluggability of the PAM and NSS service modules, storing user information in the BMC system is essentially the same as storing it on the server system's local file system.

[0051] It should be noted that the user information pre-stored in the BMC system by the server system includes user account information, user group information, and user account password information.

[0052] It should be noted that the target service is used to characterize the type of service being invoked. This target service includes either PAM authentication service or NSS service. PAM authentication service is used for user authentication verification and belongs to the authentication management type. NSS service is used to access user information and belongs to the user access type. Figure 2 This is a schematic diagram of the software architecture of the server system provided in an embodiment of the present invention, such as... Figure 2 As shown, calling the PAM authentication service means that the upper-layer software calls the relevant functions in the PAM dynamic library pam_bmc.so, which is based on BMC authentication, within the PAM authentication module. Similarly, calling the NSS service means that the upper-layer software calls the relevant functions in the NSS dynamic library libnss_bmc.so.2, which is based on BMC, within the NSS service module.

[0053] Optionally, the upper-layer software may include SSH (Secure Shell), Shell, and others, etc., and the embodiments of the present invention do not limit this.

[0054] In addition to PAM authentication services, the PAM authentication module may also include account management services, session management services, and password management services. This embodiment of the invention does not limit this.

[0055] After the upper-layer software calls the target service, a target service request corresponding to the target service can be generated. This target service request is an IPMI (Intelligent Platform Management Interface) command, which facilitates the subsequent sending of the target service request to the IPMI interface in the BMC system for out-of-band management of user information by the server system.

[0056] It should be noted that when the target service is a PAM authentication service, the corresponding target service request includes the username and password, as well as the corresponding IPMI command. When the target service is an NSS service, the corresponding target service request includes the IPMI command containing the target user information to be accessed.

[0057] Furthermore, before invoking the target service, the method also includes:

[0058] If the target service includes PAM authentication service, add a PAM authentication policy based on the BMC system to the PAM configuration file corresponding to the PAM authentication service.

[0059] Specifically, since user information is stored in the BMC system, a BMC-based PAM authentication policy must be added to the PAM configuration file before calling the PAM authentication service to ensure that the server system can authenticate users through the BMC system. Taking the Linux user login module as an example, a BMC-based PAM authentication policy is added to the PAM configuration file / etc / pam.d / login.

[0060] It should be noted that this PAM authentication module is pluggable. This pluggability is reflected in the fact that at least one PAM authentication policy and the authentication order of various PAM authentication policies can be customized and added to the PAM configuration file. For example, a PAM authentication policy based on the local file system can be added, and / or a PAM authentication policy based on the BMC system can be added. The authentication order can be set to execute the PAM authentication policy based on the local file system first, then the PAM authentication policy based on the BMC system, or vice versa. In this embodiment of the invention, the pluggability of the PAM authentication module ensures the normal operation of the server system's authentication function.

[0061] Furthermore, before invoking the target service, the method also includes:

[0062] If the target service includes an NSS service, add a second priority data source based on the BMC system to the NSS configuration file corresponding to the NSS service.

[0063] Specifically, since user information is stored in the BMC system, a second-priority data source based on the BMC system must be added to the NSS configuration file / etc / nsswitch.conf before calling the NSS service. For example, Figure 3 This is a configuration diagram of the NSS configuration file provided in an embodiment of the present invention, as shown below. Figure 3 As shown in the NSS configuration file, when retrieving data from user account information (passwd), user group information (group), and user account password information (shadow), the local file system (files) is used as the first priority data source. Before calling the NSS service, the BMC system must be added to the NSS configuration file, and the BMC system must be set as the second priority data source when retrieving data from user account information (passwd), user group information (group), and user account password information (shadow). This allows the server system to continue accessing the BMC system to retrieve target user information if it fails to access the local file system.

[0064] In this embodiment of the invention, the pluggability of the PAM authentication module and the NSS service module ensures that the server system functions normally after user information is stored in the BMC system, including user authentication, user data access, and access control.

[0065] Further, determine the target service request corresponding to the target service, including:

[0066] Based on the target configuration file corresponding to the target service, the target service strategy corresponding to the target service is determined; the target service strategy is used to characterize the method of obtaining target user information.

[0067] Execute the target service strategy and determine the target call function corresponding to the target service;

[0068] Based on the target function call, determine the target service request corresponding to the target service.

[0069] Specifically, after pre-modifying the PAM and NSS configuration files, the target configuration file (PAM or NSS) can be determined based on the target service being called. By reading the target configuration file, the target service policy is determined. This policy characterizes the method of obtaining target user information and may include policy content and execution order. For example, the policy might include a PAM authentication policy based on the local file system, and / or a PAM authentication policy based on the BMC system, authentication order, and data source retrieval priority. After determining the target service policy, it is executed, and the target calling function is determined from the target dynamic library corresponding to the target service. Based on this target function, a corresponding target service request, i.e., an IPMI command, can be generated. For example, if the target service is a PAM authentication service, the target function can be determined as the PAM authentication interface function pam_authenticate() from the BMC-based PAM dynamic library pam_bmc.so, thereby generating the corresponding PAM service request. For example, when the target service is an NSS service, the target function can be determined from libnss_bmc.so.2 in the glibc library as _nss_bmc_getpwnam_r(). This function is used to retrieve the data record of the specified username from the password database of the BMC system. Then, the corresponding NSS service request is generated according to this function.

[0070] Step 120: Based on the KCS channel in the daemon process, the target service request is sent to the BMC system; the BMC system communicates with the server system through the KCS channel, and the BMC system stores the user information corresponding to the server system.

[0071] Specifically, a daemon process (Name Server BMC client Daemon, nsbcd) is provided in the server system, through which the server system can communicate with the BMC system. After determining the target service request, the server system can send the target service request (IPMI command) to the BMC system through the KCS channel in the daemon process, thus realizing communication with the BMC system.

[0072] Step 130: Receive the target user information corresponding to the target service request fed back by the BMC system.

[0073] Specifically, after the BMC system processes the target service request, the server system can receive the target user information corresponding to the target service request from the BMC system. When the target service is a PAM authentication service, the target user information may include the authentication results of the username and password included in the target service request by the BMC system. When the target service is an NSS service, the target user information may include the retrieval results of the target file corresponding to the target service request parsed by the BMC system.

[0074] The out-of-band management method for user information provided in this invention involves the server system determining the target service request when invoking a target service, and sending the target service request to the BMC system through the KVS channel in the daemon process. The BMC system then determines the target user information corresponding to the target service request from pre-stored user information corresponding to the server system and receives the target user information from the BMC system. This ensures that the server system's user information remains functionally unaffected after being saved to the BMC system. In this invention, the BMC system provides out-of-band management of the server system's user information, allowing administrators to maintain user information in both the server system and the BMC system using a single account. This reduces maintenance workload, simplifies maintenance operations, lowers operational difficulty, and ultimately improves maintenance efficiency.

[0075] This invention also provides an out-of-band user information management method, applied to a BMC system. Figure 4 This is a second flowchart illustrating the out-of-band management method for user information provided in this embodiment of the invention, as shown below. Figure 4 As shown, the method includes steps 410 to 430.

[0076] Step 410: Receive the target service request sent by the server system.

[0077] Step 420: Based on the pre-stored user information corresponding to the server system, determine the target user information corresponding to the target service request.

[0078] Step 430: Based on the KCS channel, the target user information is sent to the server system. The BMC system communicates with the server system through the KCS channel.

[0079] Specifically, after the server system sends a target service request, the BMC system can receive the request via the KCS channel and parse the IPMI commands within it. The BMC system can then determine the server system's request intent through these IPMI commands. Based on this intent, the BMC system can determine the target user information corresponding to the target service request from pre-stored user information associated with the server system and send this information back to the server system via the KCS channel, thus completing the server system's data access or authentication functions.

[0080] It should be noted that the user information corresponding to the server system is pre-stored in the BMC system. This user information includes user account information, user group information, and user account password information. Specifically, user account information is stored in the BMC system's user account file ` / etc / passwg`, user group information is stored in the BMC system's user group file ` / etc / group`, and user account password information is stored in the BMC system's user password file ` / etc / shadow`. The format of each file is consistent with the Linux system format. Furthermore, after storing the user information, the BMC system needs to provide a corresponding data access interface for the server system to use.

[0081] Furthermore, based on the pre-stored user information corresponding to the server system, the target user information corresponding to the target service request is determined, including:

[0082] When the target service request is a user authentication request, the information to be verified in the user authentication request is verified based on the user information corresponding to the pre-stored server system, and the verification result is determined as the target user information corresponding to the user authentication request.

[0083] When the target service request is a user service request, the target file corresponding to the user service request is determined from the user information, and the target user information corresponding to the user service request is determined based on the target file; the target file includes: user account file, user group file or user password file.

[0084] Specifically, if the IPMI command obtained by the BMC system from parsing the target service request is User Authentication, it indicates that the target service request is a user authentication request, and the server system's request intent is user authentication, that is, to verify the username and password carried in the target service request. At this time, the BMC system can verify the username and password according to the pre-stored user information corresponding to the server system and obtain the authentication result.

[0085] If the IPMI command obtained by the BMC system from parsing the target service request is Get User Account Info, Get User groups Info, or Get User password Info, it indicates that the target service request is a user service request. When the IPMI command is Get User Account Info, it indicates that the server system's request intent is to obtain user account information. In this case, the BMC system can parse the user account file / etc / passwg to obtain the target user request, which includes the username, UID (User Identification), GID (Group Identifier), user directory, and shell type. When the IPMI command is Get User groups Info, it indicates that the server system's request intent is to obtain user group information. In this case, the BMC system can parse the user group file / etc / group to obtain the target user request, which includes the user group name, GID, and group members. When the IPMI command is "Get User passwordInfo", it indicates that the server system's request is intended to obtain user password information. In this case, the BMC system can parse the user password file ` / etc / shadow` to obtain the target user information. This target user information includes all usernames, the last modification time, password intervals, and maximum intervals, among other password policies. To ensure user password security, the user password itself is not included in this target user information, preventing password leakage during communication between the BMC system and the server system.

[0086] In addition, the target service request may also include IPMI commands related to operations such as changing passwords and adding users. After parsing such IPMI commands, the BMC system can execute the operation corresponding to the IPMI command.

[0087] The out-of-band user information management method provided in this invention pre-stores user information corresponding to the server system in the BMC system and provides a corresponding data service interface for the server system. Upon receiving a target service request from the server system, the method parses the request intent corresponding to the target service request, determines the target user information from the pre-stored user information corresponding to the server system, and feeds it back to the server system through the KCS channel. This achieves out-of-band management of user information corresponding to the server system without requiring login to the server system. Furthermore, the user information corresponding to the BMC system and the server system can be integrated and merged to achieve user unification between the BMC system and the server system, reducing the amount of user information maintained by the administrator, thereby reducing maintenance workload and operational difficulty, and ultimately improving maintenance efficiency.

[0088] The user information out-of-band management device provided by the present invention is described below. The user information out-of-band management device described below and the user information out-of-band management method described above can be referred to in correspondence.

[0089] This invention provides a user information out-of-band management device, applied to a server system. Figure 5 This is one of the structural schematic diagrams of the user information out-of-band management device provided in the embodiments of the present invention, such as... Figure 5 As shown, the user information out-of-band management device 500 includes: a first determining module 510, a first sending module 520, and a first receiving module 530.

[0090] The first determining module 510 is used to determine the target service request corresponding to the target service when the target service is invoked.

[0091] The first sending module 520 is used to send the target service request to the BMC system based on the KCS channel in the daemon process; the BMC system communicates with the server system through the KCS channel, and the BMC system stores the user information corresponding to the server system.

[0092] The first receiving module 530 is used to receive the target user information corresponding to the target service request fed back by the BMC system.

[0093] The out-of-band user information management device provided in this invention allows the server system to determine the target service request corresponding to the target service when calling a target service. This request is then sent to the BMC system via the KVS channel in the daemon process. The BMC system then determines the target user information corresponding to the target service request from pre-stored user information corresponding to the server system and receives the target user information from the BMC system. This ensures that the server system's user information remains functionally unaffected after being saved to the BMC system. In this invention, the BMC system provides out-of-band management of the server system's user information, allowing administrators to maintain user information in both the server system and the BMC system using a single account. This reduces maintenance workload, simplifies maintenance operations, lowers operational difficulty, and ultimately improves maintenance efficiency.

[0094] Optionally, the first determining module 510 is specifically used for:

[0095] Based on the target configuration file corresponding to the target service, a target service strategy corresponding to the target service is determined; the target service strategy is used to characterize the method of obtaining the target user information.

[0096] Execute the target service strategy and determine the target call function corresponding to the target service;

[0097] Based on the target call function, the target service request corresponding to the target service is determined.

[0098] Optionally, the target service includes PAM authentication service or NSS service.

[0099] Optionally, the user information out-of-band management device 500 further includes a first configuration module, which is specifically used for: before invoking the target service.

[0100] If the target service includes a PAM authentication service, add a PAM authentication policy based on the BMC system to the PAM configuration file corresponding to the PAM authentication service.

[0101] Optionally, the user information out-of-band management device 500 further includes a second configuration module, which is specifically used for: before invoking the target service.

[0102] If the target service includes an NSS service, add a second priority data source based on the BMC system to the NSS configuration file corresponding to the NSS service.

[0103] This invention also provides an out-of-band user information management device, applied to a BMC system. Figure 6 This is a second structural schematic diagram of the user information out-of-band management device provided in an embodiment of the present invention, as shown below. Figure 6As shown, the user information out-of-band management device 600 includes: a second receiving module 610, a second determining module 620, and a second sending module 630.

[0104] The second receiving module 610 is used to receive the target service request sent by the server system.

[0105] The second determining module 620 is used to determine the target user information corresponding to the target service request based on the user information corresponding to the pre-stored server system.

[0106] The second sending module 630 is used to send target user information to the server system based on the KCS channel. The BMC system communicates with the server system through the KCS channel.

[0107] The out-of-band user information management device provided in this embodiment of the invention pre-stores user information corresponding to the server system in the BMC system and provides a corresponding data service interface for the server system. After receiving a target service request sent by the server system, the device parses the request intent corresponding to the target service request, determines the target user information from the pre-stored user information corresponding to the server system, and feeds it back to the server system through the KCS channel, thereby realizing out-of-band management of user information corresponding to the server system without logging into the server system. Based on this, the user information corresponding to the BMC system and the server system can be integrated and merged to achieve user unification between the BMC system and the server system, reducing the amount of user information maintained by the administrator, thereby reducing maintenance workload and operational difficulty, and achieving the goal of improving maintenance efficiency.

[0108] Optionally, the second determining module 620 is specifically used for:

[0109] When the target service request is a user authentication request, the information to be verified in the user authentication request is verified based on the user information corresponding to the pre-stored server system, and the verification result is determined as the target user information corresponding to the user authentication request.

[0110] If the target service request is a user service request, the target file corresponding to the user service request is determined from the user information, and the target user information corresponding to the user service request is determined based on the target file; the target file includes: user account file, user group file or user password file.

[0111] Figure 7 This is one of the structural schematic diagrams of the server device provided in the embodiments of the present invention, such as... Figure 7As shown, the electronic device may include: a processor 710, a communications interface 720, a memory 730, and a communication bus 740, wherein the processor 710, the communications interface 720, and the memory 730 communicate with each other via the communication bus 740. The processor 710 can call logical instructions in the memory 730 to execute a user information out-of-band management method, which includes:

[0112] When a target service is invoked, the target service request corresponding to the target service is determined; the target service is used to characterize the type of service invoked.

[0113] Based on the KCS channel in the daemon process, the target service request is sent to the BMC system; the BMC system communicates with the server system through the KCS channel, and the BMC system stores the user information corresponding to the server system;

[0114] Receive the target user information corresponding to the target service request fed back by the BMC system;

[0115] or,

[0116] Receive the target service request sent by the server system;

[0117] Based on the pre-stored user information corresponding to the server system, determine the target user information corresponding to the target service request;

[0118] Based on the KCS channel, the target user information is sent to the server system, and the BMC system communicates with the server system through the KCS channel.

[0119] Furthermore, the logical instructions in the aforementioned memory 730 can be implemented as software functional units and, when sold or used as independent products, can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, in essence, or the part that contributes to the prior art, or a part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods of the various embodiments of the present invention. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0120] Figure 8 This is a second structural schematic diagram of the server device provided in an embodiment of the present invention, as shown below. Figure 8 As shown, the BMC system communicates with the server system through the KCS channel.

[0121] On the other hand, the present invention also provides a computer program product, which includes a computer program that can be stored on a non-transitory computer-readable storage medium. When the computer program is executed by a processor, the computer is able to execute the user information out-of-band management method provided by the above methods, the method including:

[0122] When a target service is invoked, the target service request corresponding to the target service is determined; the target service is used to characterize the type of service invoked.

[0123] Based on the KCS channel in the daemon process, the target service request is sent to the BMC system; the BMC system communicates with the server system through the KCS channel, and the BMC system stores the user information corresponding to the server system;

[0124] Receive the target user information corresponding to the target service request fed back by the BMC system;

[0125] or,

[0126] Receive the target service request sent by the server system;

[0127] Based on the pre-stored user information corresponding to the server system, determine the target user information corresponding to the target service request;

[0128] Based on the KCS channel, the target user information is sent to the server system, and the BMC system communicates with the server system through the KCS channel.

[0129] In another aspect, the present invention also provides a non-transitory computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, is implemented to perform the user information out-of-band management method provided by the methods described above, the method comprising:

[0130] When a target service is invoked, the target service request corresponding to the target service is determined; the target service is used to characterize the type of service invoked.

[0131] Based on the KCS channel in the daemon process, the target service request is sent to the BMC system; the BMC system communicates with the server system through the KCS channel, and the BMC system stores the user information corresponding to the server system;

[0132] Receive the target user information corresponding to the target service request fed back by the BMC system;

[0133] or,

[0134] Receive the target service request sent by the server system;

[0135] Based on the pre-stored user information corresponding to the server system, determine the target user information corresponding to the target service request;

[0136] Based on the KCS channel, the target user information is sent to the server system, and the BMC system communicates with the server system through the KCS channel.

[0137] The device embodiments described above are merely illustrative. The units described as separate components may or may not be physically separate, and the components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the modules can be selected to achieve the purpose of this embodiment according to actual needs. Those skilled in the art can understand and implement this without any creative effort.

[0138] Through the above description of the embodiments, those skilled in the art can clearly understand that each embodiment can be implemented by means of software plus necessary general-purpose hardware platforms, and of course, it can also be implemented by hardware. Based on this understanding, the above technical solutions, in essence or the part that contributes to the prior art, can be embodied in the form of a software product. This computer software product can be stored in a computer-readable storage medium, such as ROM / RAM, magnetic disk, optical disk, etc., including several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute the methods of various embodiments or some parts of embodiments.

[0139] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, and not to limit them; although the present invention has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that modifications can still be made to the technical solutions described in the foregoing embodiments, or equivalent substitutions can be made to some of the technical features; and these modifications or substitutions do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. A method for out-of-band management of user information, characterized in that, Applied to a server system, the method includes: When a target service is invoked, the target service request corresponding to the target service is determined; the target service is used to characterize the type of service invoked. Based on the KCS channel in the daemon process, the target service request is sent to the BMC system; the BMC system communicates with the server system through the KCS channel, and the BMC system stores the user information corresponding to the server system; Receive the target user information corresponding to the target service request fed back by the BMC system; Determining the target service request corresponding to the target service includes: Based on the target configuration file corresponding to the target service, a target service strategy corresponding to the target service is determined; the target service strategy is used to characterize the method of obtaining the target user information. Execute the target service strategy and determine the target call function corresponding to the target service; Based on the target call function, the target service request corresponding to the target service is determined.

2. The user information out-of-band management method according to claim 1, characterized in that, The target service includes PAM authentication service; Before invoking the target service, the method further includes: If the target service includes a PAM authentication service, add a PAM authentication policy based on the BMC system to the PAM configuration file corresponding to the PAM authentication service.

3. The user information out-of-band management method according to claim 2, characterized in that, The target service also includes NSS service; Before invoking the target service, the method further includes: If the target service includes an NSS service, add a second priority data source based on the BMC system to the NSS configuration file corresponding to the NSS service.

4. A method for out-of-band management of user information, characterized in that, Applied to a BMC system, the method includes: Receive the target service request sent by the server system; Based on the pre-stored user information corresponding to the server system, determine the target user information corresponding to the target service request; Based on the KCS channel, the target user information is sent to the server system, and the BMC system communicates with the server system through the KCS channel; The target service request is determined by the server system based on the following steps: Based on the target configuration file corresponding to the target service, a target service strategy corresponding to the target service is determined; the target service strategy is used to characterize the method of obtaining the target user information. Execute the target service strategy and determine the target call function corresponding to the target service; Based on the target call function, the target service request corresponding to the target service is determined.

5. The user information out-of-band management method according to claim 4, characterized in that, The step of determining the target user information corresponding to the target service request based on the pre-stored user information corresponding to the server system includes: When the target service request is a user authentication request, the information to be verified in the user authentication request is verified based on the user information corresponding to the pre-stored server system, and the verification result is determined as the target user information corresponding to the user authentication request. If the target service request is a user service request, the target file corresponding to the user service request is determined from the user information, and the target user information corresponding to the user service request is determined based on the target file; the target file includes: user account file, user group file or user password file.

6. A user information out-of-band management device, characterized in that, The device, used in a server system, includes: The first determining module is used to determine the target service request corresponding to the target service when the target service is invoked; The first sending module is used to send the target service request to the BMC system based on the KCS channel in the daemon process; the BMC system communicates with the server system through the KCS channel, and the BMC system stores user information corresponding to the server system; The first receiving module is used to receive the target user information corresponding to the target service request fed back by the BMC system; The first determining module is specifically configured to: determine a target service strategy corresponding to the target service based on the target configuration file corresponding to the target service; the target service strategy is used to characterize the acquisition method of the target user information; execute the target service strategy and determine the target calling function corresponding to the target service; and determine the target service request corresponding to the target service based on the target calling function.

7. A user information out-of-band management device, characterized in that, The device, used in a BMC system, includes: The second receiving module is used to receive target service requests sent by the server system. The second determining module is used to determine the target user information corresponding to the target service request based on the user information corresponding to the pre-stored server system. The second sending module is used to send the target user information to the server system based on the KCS channel, and the BMC system communicates with the server system through the KCS channel; The target service request is determined by the server system based on the following steps: Based on the target configuration file corresponding to the target service, a target service strategy corresponding to the target service is determined; the target service strategy is used to characterize the method of obtaining the target user information. Execute the target service strategy and determine the target call function corresponding to the target service; Based on the target call function, the target service request corresponding to the target service is determined.

8. A server device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that, When the processor executes the computer program, it implements the user information out-of-band management method as described in any one of claims 1 to 3, or the user information out-of-band management method as described in claim 4 or 5.

9. A non-transitory computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by the processor, it implements the user information out-of-band management method as described in any one of claims 1 to 3, or the user information out-of-band management method as described in claim 4 or 5.

Images