Computer system and its management method

• US 8,639,775 B2
• Filed: 04/28/2011
• Issued: 01/28/2014
• Est. Priority Date: 04/28/2011
• Status: Active Grant

• Current Assignee: Hitachi, Ltd.
• Original Assignee: Hitachi, Ltd.
• Inventors: Nakagawa, Hirotaka, Mori, Mioko
• Primary Examiner(s): Shah, Chirag
• Assistant Examiner(s): ULYSSE, JAEL M
• Application Number:
  US13/130,390
• Publication Number:
  US 20120278426A1
• Time in Patent Office: 1,006 Days
• Field of Search: 709/217, 709/213, 709/223, 711/114, 711/117, 711/162, 711/165, 711/170, 711/112, 380/270
• US Class Current: 709/217
• CPC Class Codes: G06F 3/0604 Improving or facilitating administration, e.g. storage management
• CPC Class Codes: G06F 3/0647 Migration mechanisms
• CPC Class Codes: G06F 3/067 Distributed or networked storage systems, e.g. storage area networks [SAN], network attached storage [NAS]
• CPC Class Codes: G06F 3/0683 Plurality of storage devices

Abstract

A migration destination storage apparatus among a plurality of storage apparatuses and has a controller for sending or receiving information to or from a host computer and managing each migration destination volume as an access target of the host computer. The controller manages each migration destination volume by dividing the migration destination volumes into a plurality of resource groups based on identification information for identifying each migration source volume; manages a plurality of resources related to each migration destination volume by associating them with each resource group; and manages each migration destination volume and each resource belonging to each resource group as operation targets to be allocated individually to each migration source user who uses each migration source volume, and as operation targets over which only each migration source user has operation authority.

Claims

1. A computer system comprising:

a plurality of storage apparatuses having one or more storage devices; and

a host computer for sending or receiving information to or from each storage apparatus via networks,

wherein;

two storage apparatuses among the plurality of storage apparatuses are migration source storage apparatuses and a storage apparatus of the plurality of storage apparatuses is a migration destination storage apparatus,

the computer system is configured to migrate data of a plurality of migration source volumes of each migration source storage apparatus via the networks to a plurality of migration destination volumes of the migration destination storage apparatus,

the host computer is configured to;

switch from a plurality of network paths connecting each migration source volume and the host computer to a plurality of network paths connecting each migration destination volume and the host computer on a condition that a migration setting is set to migrate the data of each migration source volume to each migration destination volume, and

recognize each migration destination volume as each migration source volume;

the migration destination storage apparatus includes a controller configured to;

send or receive information to or from the host computer; and

manage each migration destination volume as an access target of the host computer; and

manage each migration destination volume by associating it with each migration source storage apparatus;

divide the migration destination volumes into a plurality of resource groups based on identification information for identifying each migration source volume;

manage a plurality of resources related to each migration destination volume by associating a migration destination volume with each resource group, each resource including at least a logical device and a port;

manage each migration destination volume and each resource belonging to each resource group as operation targets to be allocated individually to each migration source user who uses each migration source apparatus, and as operation targets over which only each migration source user has operation authority;

manage role management by maintaining a map from role to resource groups, a map from group identifier (ID) to roles, a map from role ID to role names and authority bitmaps, and a map from bits of the authority bitmap to an authority; and

manage users by assigning users one or more roles or group IDs, and by executing an authority on a resource only if the user has the authority for the resource based on the one or more roles or groups assigned to the user.

2. The computer system according to claim 1, wherein if the plurality of migration destination volumes which are migration destination volumes belonging to any of the resource groups and are migrated from one of the two migration source storage apparatuses exist, the controller creates a plurality of user-based migration destination resource groups corresponding to a plurality of migration source users, for which each of the plurality of migration source volumes that are migration sources of the plurality of migration destination volumes is an operation target, as migration destination resource groups for managing the plurality of migration destination volumes;

and manages each migration destination volume by associating it with each user-based migration destination resource group.

3. The computer system according to claim 2, wherein when creating each user-based migration destination resource group corresponding to each migration source user, the controller obtains identification information for identifying each migration source user as an owner from one of the migration source storage apparatuses and creates each user-based migration destination resource group by associating it with each migration source user based on the obtained identification information.

4. The computer system according to claim 3, wherein the controller manages the plurality of resources related to each migration destination volume migrated from one of the migration source storage apparatuses by associating them with each user-based resource group;

manages each migration destination volume and each resource belonging to each user-based resource group as operation targets to be allocated individually to each migration source user who uses that one of the migration source storage apparatuses, and as operation targets over which only each migration source user has operation authority.

5. The computer system according to claim 1, wherein if a shared resource that is shared by each resource group exists in the plurality of resources related to each migration destination volume, the controller manages the shared resource as a resource group different from the plurality of resource groups by associating the shared resource with each resource group;

creates a shared resource group for sorting the shared resource into each resource group;

manages the shared resource by using the shared resource group; and

manages the shared resource group as an operation target to be allocated individually to each migration source user.

6. A computer system comprising:

a plurality of storage apparatuses having one or more storage devices; and

a host computer for sending or receiving information to or from each storage apparatus via networks,

wherein;

two storage apparatuses among the plurality of storage apparatuses are migration source storage apparatuses and a storage apparatus of the plurality of storage apparatuses is a migration destination storage apparatus,

the computer system is configured to migrate data of a plurality of migration source volumes of each migration source storage apparatus via the networks to a plurality of migration destination volumes of the migration destination storage apparatus,

the host computer is configured to;

switch from a plurality of network paths connecting each migration source volume and the host computer to a plurality of network paths connecting each migration destination volume and the host computer on a condition that a migration setting is set to migrate the data of each migration source volume to each migration destination volume, and

recognize each migration destination volume as each migration source volume;

the migration destination storage apparatus includes a controller configured to;

send or receive information to or from the host computer;

manage each migration destination volume as an access target of the host computer;

manage each migration destination volume by associating it with each migration source storage apparatus;

divide the migration destination volumes into a plurality of resource groups based on identification information for identifying each migration source volume;

manage a plurality of resources related to each migration destination volume by associating a migration destination volume with each resource group, each resource including at least a logical device and a port;

manage each migration destination volume and each resource belonging to each resource group as operation targets to be allocated individually to each migration source user who uses each migration source apparatus, and as operation targets over which only each migration source user has operation authority;

manage the shared resource as a resource group different from the plurality of resource groups by associating the shared resource with each resource group if a shared resource that is shared by each migration source storage apparatus exists in the plurality of resources related to each migration destination volume;

create a shared resource group for sorting the shared resource into each resource group;

manage the shared resource by using the shared resource group;

manage the shared resource group as an operation target to be allocated individually to each migration source user;

manage role management by maintaining a map from role to resource groups, a map from group identifier (ID) to roles, a map from role ID to role names and authority bitmaps, and a map from bits of the authority bitmap to an authority; and

manage users by assigning users one or more roles or group IDs, and by executing an authority on a resource only if the user has the authority for the resource based on the one or more roles or groups assigned to the user.

7. The computer system according to claim 6, wherein if a shared resource that is shared by each resource group exists in the plurality of resources related to each migration destination volume, the controller manages the shared resource as a resource group different from the plurality of resource groups by associating the shared resource with each resource group;

creates a shared resource group for sorting the shared resource into each resource group;

manages the shared resource by using the shared resource group; and

manages the shared resource group as an operation target to be allocated individually to each migration source user.

8. A method for managing a computer system including a plurality of storage apparatuses having one or more storage devices, and a host computer for sending or receiving information to or from each storage apparatus via networks, two storage apparatuses among the plurality of storage apparatuses are migration source storage apparatuses and a storage apparatus of the plurality of storage apparatuses is a migration destination storage apparatus, and data of a plurality of migration source volumes of each migration source storage apparatus is migrated via the networks to a plurality of migration destination volumes of the migration destination storage apparatus,

the computer system management method comprising:

a step executed by the host computer of, on condition that a migration setting is set to migrate the data of each migration source volume to each migration destination volume, switching from a plurality of network paths connecting each migration source volume and the host computer to a plurality of network paths connecting each migration destination volume and the host computer, and recognizing each migration destination volume as each migration source volume;

a step executed by a controller, which manages, at the migration destination storage apparatus, each migration destination volume as an access target of the host computer, of managing each migration destination volume by associating it with each migration source storage apparatus and dividing the migration destination volumes into a plurality of resource groups based on identification information for identifying each migration source volume;

a step executed by the controller of managing a plurality of resources related to each migration destination volume by associating them with each resource group, each resource including at least a logical device and a port;

a step executed by the controller of managing each migration destination volume and each resource belonging to each resource group as operation targets to be allocated individually to each migration source user who uses each migration source apparatus, and as operation targets over which only each migration source user has operation authority and

a step executed by the controller of managing role management by maintaining a map from role to resourese groups, a map from group ID to roles, a map from role ID to role names and authority bitmaps, and a map from bits of the authority bitmap to an authority;

a step executed by the controller of managing users by assigning users one or more roles or group IDs, and by executing an authority on a resource only if the user has the authority for the resource based on the one or more roles or groups assigned to the user.

9. The computer system management method according to claim 8, further comprising:

a step executed by the controller of, if the plurality of migration destination volumes which are migration destination volumes belonging to any of the resource groups and are migrated from one of the two migration source storage apparatuses exist, creating a plurality of user-based migration destination resource groups corresponding to a plurality of migration source users, for which each of the plurality of migration source volumes that are migration sources of the plurality of migration destination volumes is an operation target, as migration destination resource groups for managing the plurality of migration destination volumes; and

a step executed by the controller of managing each migration destination volume by associating it with each user-based migration destination resource group.

10. The computer system management method according to claim 9, further comprising:

a step executed by the controller of, when creating each user-based migration destination resource group corresponding to each migration source user, obtaining identification information for identifying each migration source user as an owner from one of the migration source storage apparatuses; and

a step executed by the controller of creating each user-based migration destination resource group by associating it with each migration source user based on the obtained identification information.

11. The computer system management method according to claim 10, further comprising:

a step executed by the controller of managing the plurality of resources related to each migration destination volume migrated from one of the migration source storage apparatuses by associating them with each user-based resource group;

a step executed by the controller of managing each migration destination volume and each resource belonging to each user-based resource group as operation targets to be allocated individually to each migration source user who uses that one of the migration source storage apparatuses, and as operation targets over which only each migration source user has operation authority.

12. The computer system management method according to claim 8, further comprising:

a step executed by the controller of, if a shared resource that is shared by each resource group exists in the plurality of resources related to each migration destination volume, managing the shared resource as a resource group different from the plurality of resource groups by associating the shared resource with each resource group;

creating a shared resource group for sorting the shared resource into each resource group;

managing the shared resource by using the shared resource group; and

a step executed by the controller of managing the shared resource group as an operation target to be allocated individually to each migration source user.