File system management method and device, computer equipment, storage medium and program product

Abstract

The invention relates to a file system management method and device, computer equipment, a storage medium and a program product. The method comprises the following steps: receiving a mounting request sent by a user side, performing authentication processing on file system information according to a pre-stored secret key table file, locally creating an account of a target user associated with the user information under the condition that the authentication is passed, and managing a file system according to the account of the target user; the mounting request comprises file system information and user information, and the secret key table file is generated according to manager information of the resource management platform and the corresponding file system information. In the method, when the file system server responds to the user request, the file system server only needs to authenticate the file system information with the local secret key table file and create the user account locally based on the user information, so that the management of the file system in the file system server is realized, interaction with an AD domain controller is not needed, and the user experience is improved. And the architecture design of the current public cloud scene is met.

Description

Technical Field

[0001] The present application relates to the field of cloud platform technology, and in particular to a file system management method, device, computer equipment, storage medium and program product. Background Art

[0002] With the advent of the information age, the amount of data generated by enterprises has exploded, and traditional data storage methods can no longer meet the needs of enterprises in terms of data capacity, security, scalability, etc. As a data storage solution based on cloud computing, public cloud file systems can provide high-capacity and high-reliability storage space, which can effectively solve the data storage problems of enterprises.

[0003] In order to uniformly manage and schedule the file system and improve data security, the file system is often authorized and managed using an AD domain. In traditional solutions, the method of using an AD domain to manage a file system includes: the server node where the file system is located needs to be added to the AD domain environment so that the AD domain can manage the server node where the file system is located. When the client accesses the server where the file system is located, the server where the file system is located needs to communicate and interact with the AD domain controller. That is, the network between the AD domain controller node, the client, and the server node where the file system is located needs to be interconnected.

[0004] However, in the public cloud scenario, the above file system management method is not applicable. Summary of the invention

[0005] Based on this, it is necessary to provide a file system management method, apparatus, computer equipment, storage medium and program product that can manage the file system in a public cloud scenario in response to the above technical problems.

[0006] In a first aspect, the present application provides a file system management method, which is applied to a file system server, comprising:

[0007] Receive a mount request sent by a user; the mount request includes file system information and user information;

[0008] The file system information is authenticated according to the pre-stored key table file; the key table file is generated according to the administrator information of the resource management platform and the corresponding file system information;

[0009] If the authentication is successful, a target user account associated with the user information is created locally, and the file system is managed according to the target user account.

[0010] In one embodiment, the method further comprises:

[0011] Receive the key table file sent by the client and store the key table file locally.

[0012] In one embodiment, the receiving of the key table file sent by the user terminal and storing the key table file locally includes:

[0013] Verify the key table file and obtain the verification result;

[0014] If the verification result indicates that the verification is passed, the key table file is stored locally;

[0015] If the verification result indicates that the verification fails, return to the step of performing verification on the key table file to obtain the verification result.

[0016] In one embodiment, the verification process of the key table file is performed to obtain the verification process result, including:

[0017] Generate first verification information based on the key table file, and encode the key table file to obtain an encoded key table file;

[0018] Decoding the encoded key table file to obtain a decoded key table file, and generating second verification information based on the decoded key table file;

[0019] The first verification information and the second verification information are verified to obtain a verification result.

[0020] In one embodiment, the method further comprises:

[0021] The key table file and other key table files are combined and deduplicated to obtain the target key table file; other key table files are generated according to other administrator information of the resource management platform and the corresponding file system information;

[0022] Store the target keytab file locally.

[0023] In a second aspect, the present application also provides a file system management method, which is applied to a user end and includes:

[0024] Receive the key table file sent by the resource management platform; the key table file is generated according to the administrator information of the resource management platform and the corresponding file system address information;

[0025] Send the key table file to the file system server;

[0026] A mount request is sent to the file system server so that the file system server authenticates the file system information in the mount request according to the key table file, and if the authentication is successful, a target user is created locally according to the user information in the mount request to manage the file system based on the target user.

[0027] In a third aspect, the present application also provides a file system management method, which is applied to a resource management platform, including:

[0028] Generate a key table file according to the manager information and the file system information corresponding to the manager information;

[0029] Send the key table file to the client.

[0030] In a fourth aspect, the present application further provides a file system management device, which is applied to a file system server and includes: a receiving module, an authentication module and a management module, wherein:

[0031] The receiving module is used to receive the mount request sent by the user end; the mount request includes file system information and user information;

[0032] An authentication module is used to authenticate the file system information according to a pre-stored key table file; the key table file is generated according to the administrator information of the resource management platform and the corresponding file system information;

[0033] The management module is used to create a target user account associated with the user information locally when the authentication is passed, and manage the file system according to the target user account.

[0034] In a fifth aspect, the present application also provides a file system management device, which is applied to a user end and includes: a receiving module, a sending module and a management module, wherein:

[0035] The receiving module is used to receive the key table file sent by the resource management platform; the key table file is generated according to the administrator information of the resource management platform and the corresponding file system address information;

[0036] A sending module, used for sending the key table file to the file system server;

[0037] The management module is used to send a mount request to the file system server so that the file system server authenticates the file system information in the mount request according to the key table file, and if the authentication is successful, creates a target user locally according to the user information in the mount request to manage the file system based on the target user.

[0038] In a sixth aspect, the present application further provides a file system management device, which is applied to a resource management platform, and includes: a generation module and a sending module, wherein:

[0039] A generation module, used for generating a key table file according to the manager information and the file system information corresponding to the manager information;

[0040] The sending module is used to send the key table file to the user end.

[0041] In a seventh aspect, the present application further provides a computer device, comprising a memory and a processor, wherein the memory stores a computer program, and when the processor executes the computer program, the following steps are implemented:

[0042] Receive a mount request sent by a user; the mount request includes file system information and user information;

[0043] The file system information is authenticated according to the pre-stored key table file; the key table file is generated according to the administrator information of the resource management platform and the corresponding file system information;

[0044] If the authentication is successful, a target user account associated with the user information is created locally, and the file system is managed according to the target user account.

[0045] In an eighth aspect, the present application further provides a computer device, comprising a memory and a processor, wherein the memory stores a computer program, and when the processor executes the computer program, the following steps are implemented:

[0046] Receive the key table file sent by the resource management platform; the key table file is generated according to the administrator information of the resource management platform and the corresponding file system address information;

[0047] Send the key table file to the file system server;

[0048] A mount request is sent to the file system server so that the file system server authenticates the file system information in the mount request according to the key table file, and if the authentication is successful, a target user is created locally according to the user information in the mount request to manage the file system based on the target user.

[0049] In a ninth aspect, the present application further provides a computer device, comprising a memory and a processor, wherein the memory stores a computer program, and when the processor executes the computer program, the following steps are implemented:

[0050] Generate a key table file according to the manager information and the file system information corresponding to the manager information;

[0051] Send the key table file to the client.

[0052] In a tenth aspect, the present application further provides a computer-readable storage medium having a computer program stored thereon, wherein when the computer program is executed by a processor, the following steps are implemented:

[0053] Receive a mount request sent by a user; the mount request includes file system information and user information;

[0054] The file system information is authenticated according to the pre-stored key table file; the key table file is generated according to the administrator information of the resource management platform and the corresponding file system information;

[0055] If the authentication is successful, a target user account associated with the user information is created locally, and the file system is managed according to the target user account.

[0056] In an eleventh aspect, the present application further provides a computer-readable storage medium having a computer program stored thereon, wherein when the computer program is executed by a processor, the following steps are implemented:

[0057] Receive the key table file sent by the resource management platform; the key table file is generated according to the administrator information of the resource management platform and the corresponding file system address information;

[0058] Send the key table file to the file system server;

[0059] A mount request is sent to the file system server so that the file system server authenticates the file system information in the mount request according to the key table file, and if the authentication is successful, a target user is created locally according to the user information in the mount request to manage the file system based on the target user.

[0060] In a twelfth aspect, the present application further provides a computer-readable storage medium having a computer program stored thereon, wherein when the computer program is executed by a processor, the following steps are implemented:

[0061] Generate a key table file according to the manager information and the file system information corresponding to the manager information;

[0062] Send the key table file to the client.

[0063] In a thirteenth aspect, the present application further provides a computer program product, including a computer program, which implements the following steps when executed by a processor:

[0064] Receive a mount request sent by a user; the mount request includes file system information and user information;

[0065] The file system information is authenticated according to the pre-stored key table file; the key table file is generated according to the administrator information of the resource management platform and the corresponding file system information;

[0066] If the authentication is successful, a target user account associated with the user information is created locally, and the file system is managed according to the target user account.

[0067] In a fourteenth aspect, the present application further provides a computer program product, including a computer program, which implements the following steps when executed by a processor:

[0068] Receive the key table file sent by the resource management platform; the key table file is generated according to the administrator information of the resource management platform and the corresponding file system address information;

[0069] Send the key table file to the file system server;

[0070] A mount request is sent to the file system server so that the file system server authenticates the file system information in the mount request according to the key table file, and if the authentication is successful, a target user is created locally according to the user information in the mount request to manage the file system based on the target user.

[0071] In a fifteenth aspect, the present application further provides a computer program product, including a computer program, which implements the following steps when executed by a processor:

[0072] Generate a key table file according to the manager information and the file system information corresponding to the manager information;

[0073] Send the key table file to the client.

[0074] The above-mentioned file system management method, apparatus, computer equipment, storage medium and program product, when responding to a user request, the file system server only needs to authenticate the file system information with the local key table file, and create a user account locally based on the user information, so as to manage the file system in the file system server. There is no need to interact with the AD domain controller, nor to add the file system server to the AD domain controller, which is in line with the architectural design of the current public cloud scenario. BRIEF DESCRIPTION OF THE DRAWINGS

[0075] In order to more clearly illustrate the technical solutions in the embodiments of the present application or related technologies, the drawings required for use in the embodiments of the present application or related technical descriptions will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without paying creative work.

[0076] Figure 1 is an application environment diagram of a method for managing a file system in one embodiment;

[0077] Figure 2 A flowchart of a method for managing a file system in one embodiment;

[0078] Figure 3 is a flowchart of a method for managing a file system in another embodiment;

[0079] Figure 4 is a flowchart of a method for managing a file system in another embodiment;

[0080] Figure 5 is a flowchart of a method for managing a file system in another embodiment;

[0081] Figure 6 is a flowchart of a method for managing a file system in another embodiment;

[0082] Figure 7 is a flowchart of a method for managing a file system in another embodiment;

[0083] Figure 8 is a flowchart of a method for managing a file system in another embodiment;

[0084] Fig. 9 is a structural block diagram of a file system management device in one embodiment;

[0085] Fig.10 FIG. 4 is a diagram showing the internal structure of a computer device in one embodiment. DETAILED DESCRIPTION

[0086] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0087] With the advent of the information age, the amount of data generated by enterprises has exploded, and traditional data storage methods can no longer meet the needs of enterprises for data capacity, security, scalability, etc. As a data storage solution based on cloud computing, public cloud file systems can provide high-capacity and high-reliability storage space, which can effectively solve the data storage problems of enterprises. Common Internet File System (CIFS) file system, as a type of public cloud file system, is usually used in data access scenarios of Windows devices and is suitable for enterprise office environments.

[0088] In the Windows working environment, in order to uniformly manage and schedule the file system and improve data security, the file system is often authorized and managed using the AD domain. In the traditional solution, the method of using the AD domain to manage the file system includes: the server node where the file system is located needs to be added to the AD domain environment so that the AD domain can manage the server node where the file system is located. When the client accesses the server where the file system is located, the server where the file system is located needs to communicate and interact with the AD domain controller. That is, the network between the AD domain controller node, the client and the server node where the file system is located needs to be interconnected.

[0089] However, the above solution is only applicable to private cloud scenarios or offline small-scale deployment applications. In the public cloud scenario, the file system server is located in the cloud service provider's computer room, and the cloud service provider has its management and control authority, while the AD domain controller is usually served by a server outside the cloud or a cloud host server, and the user has full management and control authority. For security reasons, the user's client node and AD controller node can only access the cloud vendor's file system server in one direction, and the file system server cannot access the user's cloud host or AD domain controller in reverse. Therefore, the above solution cannot realize the management of the file system by the AD domain controller, that is, in the public cloud scenario, the above file system management method is not applicable. This application aims to solve this problem.

[0090] After introducing the background technology of the file system management method provided by the embodiment of the present application, the implementation environment involved in the file system management method provided by the embodiment of the present application will be briefly described below. The file system management method provided by the embodiment of the present application can be applied to Figure 1 In the implementation environment shown. The implementation environment includes a file system server 10, a resource management platform 20 and a user terminal 30. The file system server 10 is used to store the file system. The resource management platform 20 and the user terminal 30 can communicate with the file system server 10 in a one-way manner, that is, the resource management platform 20 and the user terminal 30 can send messages to the file system server 10, but the file system server 10 cannot send messages to the resource management platform 20 and the user terminal 30.

[0091] After introducing the application scenarios of the file system management method provided in the embodiments of the present application, the following focuses on introducing the file system management method described in the present application.

[0092] In one embodiment, Figure 2 As shown, a method for managing a file system is provided, and the method is applied to Figure 1 The file system server 10 in the example is used as an example to illustrate, including the following steps:

[0093] S201: Receive a mount request sent by a user terminal.

[0094] The mount request includes file system information and user information.

[0095] In an embodiment of the present application, when it is necessary to manage multiple file systems stored in a file system server, the user terminal may send a mount request to the file system server, so that the file system server receives the mount request sent by the user terminal.

[0096] S202: Authenticate the file system information according to the pre-stored key table file.

[0097] Among them, the key table file is generated according to the administrator information of the resource management platform and the corresponding file system information.

[0098] Among them, the resource management platform can be an AD domain server. AD (Active Directory) domain is a hierarchical structure developed by Microsoft for centrally managing network resources. It can provide a standardized method to create, organize and manage users, computers, services and other resources in computer networks, and provide enterprises with the ability to centrally manage user authentication, authorization and access control. The concept of AD domain is based on the Windows operating system. The management node in the AD domain is called the domain controller DC, which implements specific management of resources in the AD domain.

[0099] The administrator information refers to the user information and password information of the administrator in the AD domain server, and the file system information refers to the file system service address information managed by the administrator in the administrator information.

[0100] In the embodiment of the present application, after the file system information in the mount request is obtained as described above, the file system information can be authenticated according to the pre-stored key table file. Optionally, the specific authentication process may include: comparing the file system information in the pre-stored key table file with the file system information in the mount request, if the file system information in the key table file is the same as the file system information in the mount request, it means that the authentication is successful, if the file system information in the key table file is different from the file system information in the mount request, it means that the authentication fails.

[0101] S203: When the authentication is successful, a target user account associated with the user information is created locally, and the file system is managed according to the target user account.

[0102] In the embodiment of the present application, when the above-mentioned authentication is passed, an account of the target user associated with the user information can be created locally, and the file system can be managed according to the account of the target user.

[0103] The file system management method provided in the embodiment of the present application is applied to the file system server, receives the mount request sent by the user terminal, authenticates the file system information according to the pre-stored key table file, and creates a target user account associated with the user information locally when the authentication is passed, and manages the file system according to the target user account; the mount request includes file system information and user information, and the key table file is generated according to the administrator information of the resource management platform and the corresponding file system information. In the above method, when responding to the user request, the file system server only needs to authenticate the file system information with the local key table file, and create a user account locally based on the user information, so as to realize the management of the file system in the file system server, without the need to interact with the AD domain controller, and without the need to add the file system server to the AD domain controller, which is in line with the architecture design of the current public cloud scenario.

[0104] In one embodiment, Figure 2 Based on the embodiment shown, Figure 3 As shown, the above method also includes:

[0105] S204: Receive the key table file sent by the user terminal, and store the key table file locally.

[0106] In an embodiment of the present application, before the user terminal sends a mount request to the file system server, the user terminal may also first send a key table file to the file system server, so that the file system server receives and stores the key table file sent by the user terminal, so as to subsequently authenticate the file system information according to the key table file.

[0107] Optionally, the following provides a method to store the key table file locally, see Figure 4 The above S204 “receiving the key table file sent by the user terminal and storing the key table file locally” includes:

[0108] S301, verify the key table file to obtain a verification result. If the verification result indicates that the verification is passed, execute the following S302. If the verification result indicates that the verification is not passed, return to the step of verifying the key table file to obtain a verification result.

[0109] In the embodiment of the present application, after the key table file is obtained as described above, the key table file can be verified based on the file identifier corresponding to the key table file to obtain a verification result that the key table file passes the verification or a verification result that the key table file fails the verification. It should be noted that one key table file corresponds to one file identifier.

[0110] Optionally, a specific implementation method for verifying the key table file is also provided, see Figure 5 The above S301 "verify the key table file to obtain a verification result" includes:

[0111] S401. Generate first verification information based on a key table file, and encode the key table file to obtain an encoded key table file.

[0112] In the embodiment of the present application, after the key table file is obtained as described above, the data in the key table file can be calculated and processed to obtain the first verification information, and the key table file can be string encoded to obtain the encoded key table file.

[0113] Optionally, the user terminal can first upload the key table file to the public cloud front-end page console of the file system server. The public cloud front-end page console first checks the validity of the key table file and calculates the first verification information of the key table file, and then encodes the key table file into a string to obtain the encoded key table file. By calling the interface provided by the file server, the encoded key table file and the first verification information are transmitted to the file server.

[0114] S402: Decode the encoded key table file to obtain a decoded key table file, and generate second verification information based on the decoded key table file.

[0115] In an embodiment of the present application, after the file system server receives the encoded key table file and the first verification information, it can decode the encoded key table file to obtain a decoded key table file, and calculate the second verification information of the decoded key table file.

[0116] S403: Perform verification processing on the first verification information and the second verification information to obtain a verification processing result.

[0117] The verification processing results include verification success and verification failure.

[0118] In an embodiment of the present application, after the first verification information and the second verification information are obtained as described above, the first verification information and the second verification information can be compared. If the first verification information and the second verification information are consistent, it indicates that the verification is successful. If the first verification information and the second verification information are inconsistent, it indicates that the verification is successful.

[0119] So far, a method for obtaining a verification processing result is provided.

[0120] S302: Store the key table file locally.

[0121] In the embodiment of the present application, if the verification processing result indicates that the verification is passed, the key table file is stored locally.

[0122] The file system management method provided in the embodiment of the present application verifies the key table file and determines whether to store the key table file locally based on the verification result, thereby providing an accurate data basis for subsequent authentication based on the key table file.

[0123] In one embodiment, Figure 3 Based on the embodiment shown, Figure 6 As shown, the above method also includes:

[0124] S205: Merge the key table file and other key table files to remove duplicates and obtain a target key table file.

[0125] Among them, other key table files are generated according to other manager information of the resource management platform and corresponding file system information.

[0126] In an embodiment of the present application, after the file system server simultaneously receives the key table file and other key table files, the key table file and other key table files may be merged and deduplicated to obtain a target key table file.

[0127] S206. Store the target key table file locally.

[0128] In the embodiment of the present application, after the target key table file is determined as described above, the target key table file may be stored locally.

[0129] The method for merging and deduplicating key table files provided in the embodiments of the present application can avoid the duplication of key table files, thereby reducing the space occupied by key table files.

[0130] In one embodiment, Figure 7 As shown, a method for managing a file system is provided, and the method is applied to Figure 1 The user end in FIG. 1 is taken as an example to illustrate, and the following steps are included:

[0131] S501. Receive a key table file sent by a resource management platform.

[0132] Among them, the key table file is generated according to the administrator information of the resource management platform and the corresponding file system address information.

[0133] In an embodiment of the present application, after the resource management platform generates the key table file, the key table file can be sent to the user end, so that the user end receives the key table file sent by the resource management platform.

[0134] S502: Send the key table file to the file system server.

[0135] In the embodiment of the present application, after receiving the key table file sent by the resource management platform, the key table file can be sent to the file system server.

[0136] S503. Send a mount request to the file system server, so that the file system server authenticates the file system information in the mount request according to the key table file, and if the authentication is successful, creates a target user locally according to the user information in the mount request, so as to manage the file system based on the target user.

[0137] In an embodiment of the present application, after the key table file is sent to the file system server as mentioned above, a mount request can be sent to the file system server at any time, so that the file system server can authenticate the file system information in the mount request according to the key table file, and if the authentication is successful, create a target user locally according to the user information in the mount request, so as to manage the file system based on the target user.

[0138] The file system management method provided in the embodiment of the present application is that when the file system server responds to a user request, it only needs to authenticate the file system information with the local key table file, and create a user account locally based on the user information, so as to manage the file system in the file system server. There is no need to interact with the AD domain controller, nor is there any need to add the file system server to the AD domain controller, which is in line with the architectural design of the current public cloud scenario.

[0139] In one embodiment, Figure 8 As shown, a method for managing a file system is provided, and the method is applied to Figure 1 The resource management platform in is used as an example to illustrate the process, including the following steps:

[0140] S601. Generate a key table file according to the manager information and the file system information corresponding to the manager information.

[0141] In the embodiment of the present application, a service account can be pre-registered for the domain name of the file system on the AD domain controller, and the service account is added to the AD domain controller as the file system service code. Use the service account to create a service principal spn for the file system. Use tools such as ktpass to create a kerberos key table file for the spn of the file system on the AD domain based on the manager information and the file system information corresponding to the manager information.

[0142] S602: Send the key table file to the user end.

[0143] In the embodiment of the present application, after the key table file is obtained as described above, the key table file can be sent to the user end.

[0144] Optionally, this application uses customized samba as CIFS file service on the public cloud file system server. The samba service has the ability to use kerberos as the authentication protocol. The server provides file system mount points to users in the form of \\[ip]\[share_path]. Each file system server provides multiple file system sharing functions. The file system root directory is set with permission attributes, and the permission attributes are set to be non-recursive to ensure that users have sufficient permissions to perform read and write operations after mounting.

[0145] Optionally, the file system server uses Kerberos as the network authorization protocol to perform identity authentication when the client sends a request. Do not set any information related to the specific AD domain in the Kerberos service, and do not register the IP address or domain name of the AD domain server. Set the Kerberos service to use the key table for identity authentication, and verify the legitimacy of the user identity by comparing the service principal spn in the key table.

[0146] Optionally, use Windows as an AD domain controller to manage user information in the domain, such as user names and passwords. Configure local domain name mapping for the file system on the AD domain controller, and map the original file system mount point to an Internet domain name by setting the mount point IP to domain name mapping relationship in the local hosts file.

[0147] The file system management method provided in the embodiment of the present application is that when the file system server responds to a user request, it only needs to authenticate the file system information with the local key table file, and create a user account locally based on the user information, so as to manage the file system in the file system server. There is no need to interact with the AD domain controller, nor is there any need to add the file system server to the AD domain controller, which is in line with the architectural design of the current public cloud scenario.

[0148] It should be understood that, although the various steps in the flowcharts involved in the above-mentioned embodiments are displayed in sequence according to the indication of the arrows, these steps are not necessarily executed in sequence according to the order indicated by the arrows. Unless there is a clear explanation in this article, the execution of these steps does not have a strict order restriction, and these steps can be executed in other orders. Moreover, at least a part of the steps in the flowcharts involved in the above-mentioned embodiments can include multiple steps or multiple stages, and these steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these steps or stages is not necessarily to be carried out in sequence, but can be executed in turn or alternately with other steps or at least a part of the steps or stages in other steps.

[0149] Based on the same inventive concept, the embodiment of the present application also provides a file system management device for implementing the file system management method involved above. The implementation scheme for solving the problem provided by the device is similar to the implementation scheme recorded in the above method, so the specific limitations in the one or more file system management device embodiments provided below can refer to the limitations of the file system management method above, and will not be repeated here.

[0150] In an exemplary embodiment, Fig. 9 As shown, a file system management device is provided, comprising: a receiving module 10, an authentication module 11 and a management module 12, wherein:

[0151] The receiving module 10 is used to receive a mount request sent by a user terminal; the mount request includes file system information and user information.

[0152] The authentication module 11 is used to authenticate the file system information according to a pre-stored key table file; the key table file is generated according to the administrator information of the resource management platform and the corresponding file system information.

[0153] The management module 12 is used to locally create an account of the target user associated with the user information when the authentication is passed, and manage the file system according to the account of the target user.

[0154] In an exemplary embodiment, the above-mentioned device further includes: a storage module, configured to receive a key table file sent by a user terminal, and store the key table file locally.

[0155] In an exemplary embodiment, the storage module includes: a first processing unit, a storage unit, and a second processing unit, wherein:

[0156] The first processing unit is specifically used to verify the key table file and obtain a verification result;

[0157] A storage unit, specifically used to store the key table file locally when the verification processing result indicates that the verification is passed;

[0158] The second processing unit is specifically used to return to the step of performing verification processing on the key table file to obtain the verification processing result when the verification processing result indicates that the verification fails.

[0159] In an exemplary embodiment, the above-mentioned first processing unit is specifically used to generate first verification information based on a key table file, and encode the key table file to obtain an encoded key table file; decode the encoded key table file to obtain a decoded key table file, and generate second verification information based on the decoded key table file; verify the first verification information and the second verification information to obtain a verification processing result.

[0160] In an exemplary embodiment, the above-mentioned file system management device further includes: a processing module and a storage module, wherein:

[0161] A processing module is used to merge and de-duplicate the key table file with other key table files to obtain a target key table file; other key table files are generated according to other administrator information of the resource management platform and corresponding file system information;

[0162] The storage module is used to store the target key table file locally.

[0163] In an exemplary embodiment, a file system management device is provided, comprising: a receiving module, a first sending module and a second sending module, wherein:

[0164] The receiving module is used to receive the key table file sent by the resource management platform; the key table file is generated according to the administrator information of the resource management platform and the corresponding file system address information;

[0165] A first sending module, used for sending the key table file to the file system server;

[0166] The second sending module is used to send a mount request to the file system server, so that the file system server authenticates the file system information in the mount request according to the key table file, and if the authentication is successful, creates a target user locally according to the user information in the mount request to manage the file system based on the target user.

[0167] In an exemplary embodiment, a file system management device is provided, comprising: a generating module and a sending module, wherein:

[0168] A generation module, used for generating a key table file according to the manager information and the file system information corresponding to the manager information;

[0169] The sending module is used to send the key table file to the user end.

[0170] Each module in the above-mentioned file system management device can be implemented in whole or in part by software, hardware or a combination thereof. Each module can be embedded in or independent of a processor in a computer device in the form of hardware, or can be stored in a memory in a computer device in the form of software, so that the processor can call and execute operations corresponding to each module.

[0171] In an exemplary embodiment, a computer device is provided. The computer device may be a server, and its internal structure diagram may be as shown in FIG. Fig.10 As shown. The computer device includes a processor, a memory, an input / output interface (Input / Output, referred to as I / O) and a communication interface. The processor, the memory and the input / output interface are connected through a system bus, and the communication interface is connected to the system bus through the input / output interface. The processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The database of the computer device is used to store file system data. The input / output interface of the computer device is used to exchange information between the processor and an external device. The communication interface of the computer device is used to communicate with an external terminal through a network connection. When the computer program is executed by the processor, a file system management method is implemented.

[0172] Those skilled in the art will understand that Fig.10 The structure shown in the figure is only a block diagram of a part of the structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied. The specific computer device may include more or fewer components than those shown in the figure, or combine certain components, or have a different arrangement of components.

[0173] In an exemplary embodiment, a computer device is provided, including a memory and a processor, wherein a computer program is stored in the memory, and when the processor executes the computer program, the following steps are implemented:

[0174] Receive a mount request sent by a user; the mount request includes file system information and user information;

[0175] The file system information is authenticated according to the pre-stored key table file; the key table file is generated according to the administrator information of the resource management platform and the corresponding file system information;

[0176] If the authentication is successful, a target user account associated with the user information is created locally, and the file system is managed according to the target user account.

[0177] In one embodiment, when the processor executes the computer program, the processor further implements the following steps:

[0178] Receive the key table file sent by the client and store the key table file locally.

[0179] In one embodiment, when the processor executes the computer program, the processor further implements the following steps:

[0180] Verify the key table file and obtain the verification result;

[0181] If the verification result indicates that the verification is passed, the key table file is stored locally;

[0182] If the verification result indicates that the verification fails, return to the step of performing verification on the key table file to obtain the verification result.

[0183] In one embodiment, when the processor executes the computer program, the processor further implements the following steps:

[0184] Generate first verification information based on the key table file, and encode the key table file to obtain an encoded key table file;

[0185] Decoding the encoded key table file to obtain a decoded key table file, and generating second verification information based on the decoded key table file;

[0186] The first verification information and the second verification information are verified to obtain a verification result.

[0187] In one embodiment, when the processor executes the computer program, the processor further implements the following steps:

[0188] The key table file and other key table files are combined and deduplicated to obtain the target key table file; other key table files are generated according to other administrator information of the resource management platform and the corresponding file system information;

[0189] Store the target keytab file locally.

[0190] In one embodiment, when the processor executes the computer program, the processor further implements the following steps:

[0191] Receive the key table file sent by the resource management platform; the key table file is generated according to the administrator information of the resource management platform and the corresponding file system address information;

[0192] Send the key table file to the file system server;

[0193] A mount request is sent to the file system server so that the file system server authenticates the file system information in the mount request according to the key table file, and if the authentication is successful, a target user is created locally according to the user information in the mount request to manage the file system based on the target user.

[0194] In one embodiment, when the processor executes the computer program, the processor further implements the following steps:

[0195] Generate a key table file according to the manager information and the file system information corresponding to the manager information;

[0196] Send the key table file to the client.

[0197] In one embodiment, a computer readable storage medium is provided, on which a computer program is stored, and when the computer program is executed by a processor, the following steps are implemented:

[0198] Receive a mount request sent by a user; the mount request includes file system information and user information;

[0199] The file system information is authenticated according to the pre-stored key table file; the key table file is generated according to the administrator information of the resource management platform and the corresponding file system information;

[0200] If the authentication is successful, a target user account associated with the user information is created locally, and the file system is managed according to the target user account.

[0201] In one embodiment, when the computer program is executed by a processor, the following steps are also implemented:

[0202] Receive the key table file sent by the client and store the key table file locally.

[0203] In one embodiment, when the computer program is executed by a processor, the following steps are also implemented:

[0204] Verify the key table file and obtain the verification result;

[0205] If the verification result indicates that the verification is passed, the key table file is stored locally;

[0206] If the verification result indicates that the verification fails, return to the step of performing verification on the key table file to obtain the verification result.

[0207] In one embodiment, when the computer program is executed by a processor, the following steps are also implemented:

[0208] Generate first verification information based on the key table file, and encode the key table file to obtain an encoded key table file;

[0209] Decoding the encoded key table file to obtain a decoded key table file, and generating second verification information based on the decoded key table file;

[0210] The first verification information and the second verification information are verified to obtain a verification result.

[0211] In one embodiment, when the computer program is executed by a processor, the following steps are also implemented:

[0212] The key table file and other key table files are combined and deduplicated to obtain the target key table file; other key table files are generated according to other administrator information of the resource management platform and the corresponding file system information;

[0213] Store the target keytab file locally.

[0214] In one embodiment, when the computer program is executed by a processor, the following steps are also implemented:

[0215] Receive the key table file sent by the resource management platform; the key table file is generated according to the administrator information of the resource management platform and the corresponding file system address information;

[0216] Send the key table file to the file system server;

[0217] A mount request is sent to the file system server so that the file system server authenticates the file system information in the mount request according to the key table file, and if the authentication is successful, a target user is created locally according to the user information in the mount request to manage the file system based on the target user.

[0218] In one embodiment, when the computer program is executed by a processor, the following steps are also implemented:

[0219] Generate a key table file according to the manager information and the file system information corresponding to the manager information;

[0220] Send the key table file to the client.

[0221] In one embodiment, a computer program product is provided, comprising a computer program, which, when executed by a processor, implements the following steps:

[0222] Receive a mount request sent by a user; the mount request includes file system information and user information;

[0223] The file system information is authenticated according to the pre-stored key table file; the key table file is generated according to the administrator information of the resource management platform and the corresponding file system information;

[0224] If the authentication is successful, a target user account associated with the user information is created locally, and the file system is managed according to the target user account.

[0225] In one embodiment, when the computer program is executed by a processor, the following steps are also implemented:

[0226] Receive the key table file sent by the client and store the key table file locally.

[0227] In one embodiment, when the computer program is executed by a processor, the following steps are also implemented:

[0228] Verify the key table file and obtain the verification result;

[0229] If the verification result indicates that the verification is passed, the key table file is stored locally;

[0230] If the verification result indicates that the verification fails, return to the step of performing verification on the key table file to obtain the verification result.

[0231] In one embodiment, when the computer program is executed by a processor, the following steps are also implemented:

[0232] Generate first verification information based on the key table file, and encode the key table file to obtain an encoded key table file;

[0233] Decoding the encoded key table file to obtain a decoded key table file, and generating second verification information based on the decoded key table file;

[0234] The first verification information and the second verification information are verified to obtain a verification result.

[0235] In one embodiment, when the computer program is executed by a processor, the following steps are also implemented:

[0236] The key table file and other key table files are combined and deduplicated to obtain the target key table file; other key table files are generated according to other administrator information of the resource management platform and the corresponding file system information;

[0237] Store the target keytab file locally.

[0238] In one embodiment, when the computer program is executed by a processor, the following steps are also implemented:

[0239] Receive the key table file sent by the resource management platform; the key table file is generated according to the administrator information of the resource management platform and the corresponding file system address information;

[0240] Send the key table file to the file system server;

[0241] A mount request is sent to the file system server so that the file system server authenticates the file system information in the mount request according to the key table file, and if the authentication is successful, a target user is created locally according to the user information in the mount request to manage the file system based on the target user.

[0242] In one embodiment, when the computer program is executed by a processor, the following steps are also implemented:

[0243] Generate a key table file according to the manager information and the file system information corresponding to the manager information;

[0244] Send the key table file to the client.

[0245] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data must comply with relevant regulations.

[0246] A person of ordinary skill in the art can understand that all or part of the processes in the above-mentioned embodiment method can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to the memory, database or other medium used in the embodiments provided in the present application can include at least one of non-volatile memory and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM). The database involved in each embodiment provided in this application may include at least one of a relational database and a non-relational database. Non-relational databases may include distributed databases based on blockchains, etc., but are not limited to this. The processor involved in each embodiment provided in this application may be a general-purpose processor, a central processing unit, a graphics processor, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, an artificial intelligence (AI) processor, etc., but are not limited to this.

[0247] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this application.

[0248] The above-described embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be construed as limiting the scope of the present application. It should be noted that, for a person of ordinary skill in the art, several modifications and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the attached claims.

Claims

1. A method for managing a file system, characterized in that: Applied to a file system server, the method comprises: Receiving a mount request sent by a user terminal; the mount request includes file system information and user information; Authentication processing is performed on the file system information according to a pre-stored key table file; the key table file is generated according to the administrator information of the resource management platform and the corresponding file system information; When the authentication is successful, an account of the target user associated with the user information is created locally, and the file system is managed according to the account of the target user.

2. The method according to claim 1, characterized in that The method further comprises: Receive the key table file sent by the user terminal, and store the key table file locally.

3. The method according to claim 2, characterized in that The receiving the key table file sent by the user terminal and storing the key table file locally includes: Performing verification processing on the key table file to obtain a verification processing result; If the verification processing result indicates that the verification is passed, storing the key table file locally; When the verification processing result indicates that the verification fails, the process returns to the step of performing verification processing on the key table file to obtain the verification processing result.

4. The method according to claim 3, characterized in that The verifying the key table file to obtain a verification result includes: Generate first verification information based on the key table file, and encode the key table file to obtain an encoded key table file; Decoding the encoded key table file to obtain a decoded key table file, and generating second verification information based on the decoded key table file; Verification processing is performed on the first verification information and the second verification information to obtain the verification processing result.

5. The method according to claim 2, characterized in that: The method further comprises: The key table file and other key table files are combined and deduplicated to obtain a target key table file; the other key table files are generated according to other administrator information of the resource management platform and corresponding file system information; The target key table file is stored locally.

6. A method for managing a file system, characterized in that: Applied to a user terminal, the method includes: Receiving a key table file sent by a resource management platform; the key table file is generated according to the administrator information of the resource management platform and the corresponding file system address information; Sending the key table file to a file system server; A mount request is sent to the file system server so that the file system server authenticates the file system information in the mount request according to the key table file, and if the authentication is successful, a target user is created locally according to the user information in the mount request to manage the file system based on the target user.

7. A method for managing a file system, characterized in that: Applied to a resource management platform, the method comprises: Generate a key table file according to the manager information and the file system information corresponding to the manager information; Send the key table file to the user end.

8. A file system management device, characterized in that: Applied to a file system server, the device comprises: A receiving module, used for receiving a mount request sent by a user terminal; the mount request includes file system information and user information; An authentication module, used to authenticate the file system information according to a pre-stored key table file; the key table file is generated according to the administrator information of the resource management platform and the corresponding file system information; The management module is used to locally create an account of a target user associated with the user information when the authentication is passed, and manage the file system according to the account of the target user.

9. A computer device comprising a memory and a processor, wherein the memory stores a computer program, wherein: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 7 are implemented.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 7 are implemented.

Images