Automated, controlled distribution and execution of commands and scripts

• US 9,262,208 B2
• Filed: 08/20/2012
• Issued: 02/16/2016
• Est. Priority Date: 08/20/2012
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Guo, Shang Q., Palakodeti, Ramesh S., Puri, Rajeev, Rosu, Daniela, Venugopal, Cashchakanithara, Wu, Frederick Y., Zeng, Sai
• Primary Examiner(s): LEMMA, SAMSON B
• Application Number:
  US13/589,585
• Publication Number:
  US 20140053072A1
• Time in Patent Office: 1,275 Days
• Field of Search: 726/2, 726/27, 713/736, 715/736
• US Class Current: 1/1
• CPC Class Codes: G06F 9/468 Specific access rights for resources, e.g. using capability register
• CPC Class Codes: G06F 9/4843 by program, e.g. task dispatcher, supervisor, operating system
• CPC Class Codes: H04L 41/22 comprising specially adapted graphical user interfaces [GUI]
• CPC Class Codes: H04L 41/28 Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration

Abstract

Distributed execution of commands and scripts may comprise a script execution manager having access to a library of executable objects comprising at least one or more of commands or scripts or combination of commands and scripts. A script execution console may be operable to present a graphical user interface for selecting an executable object from the library to execute and for selecting one or more managed computers, on which to execute the selected executable object. The script execution console may be further operable to present a dynamically updated collation of results from execution of the selected executable object. One or more script execution agents may be operable to run on the selected respective one or more managed computers and further operable to communicate with the script execution manager.

Claims

1. A method of distributed execution of commands and scripts, comprising:

presenting, by one or more hardware processors via a graphical user interface, at least a command line field for entering an identifier of a selected executable object, a menu of operating system platforms from which to select, wherein one or more managed computers are automatically selected based on a selection from the menu of operating system platforms, and a results window that presents dynamically collated results, the command line field, the menu of operating system platforms, and the results window presented in one screen;

receiving by one or more of the hardware processors, a selected executable object entered via the graphical user interface from a user;

receiving by one or more of the hardware processors, via the graphical user interface, the selected one or more managed computers on which to execute the selected executable object;

determining whether the user is authorized to execute the selected executable object on the selected one or more managed computers;

in response to determining that the user is authorized to execute the selected executable object, communicating, by one or more of the hardware processors, to the selected one or more managed computers to execute the executable object and dynamically collating by one or more of the hardware processors, results from the execution of the executable object on all of the selected one or more managed computers; and

in response to determining that the user is not authorized to execute the selected executable object, presenting an alert to the user via the graphical user interface.

2. The method of claim 1, further comprising:

in response to determining that the user is authorized to execute the selected executable object, checking for existence of the selected executable object on the selected one or more managed computers, and in response to determining that the selected executable object exists, comparing a digital signature of the executable object with an approved digital signature associated with the executable object, and in response to determining that the digital signature matches with the approved digital signature, executing the selected executable object, and in response to determining that the digital signature does not match with the approved digital signature, downloading a version of the executable object from an approved server and executing the downloaded version of the executable object.

3. The method of claim 1, further comprising:

automatically mapping the selected executable object into a platform specific executable object compatible to execute on the selected one or more managed computers.

4. The method of claim 1, wherein the determining of whether the user is authorized to execute the selected executable object on the selected one or more managed computers comprises checking a control list containing allowable executable objects specific to a user role.

5. The method of claim 1, further comprising:

assigning a temporary role to the user, the temporary role determining which list of executable objects to use to validate the selected executable object.

6. The method of claim 1, wherein the executable object is a script.

7. The method of claim 1, wherein the executable object is a command.

8. The method of claim 1, further comprising presenting via the graphical user interface the dynamically collated results.

9. The method of claim 1, wherein the determining of whether the user is authorized to execute the selected executable object on the selected one or more managed computers comprises checking a list containing executable objects said user is disallowed from executing.

10. A method of distributed execution of commands and scripts, comprising:

presenting, by one or more hardware processors via a graphical user interface at least a command line field for entering an identifier of a selected executable object, a menu of operating system platforms from which to select, wherein one or more managed computers are automatically selected based on a selection from the menu of operating system platforms, and a results window that presents dynamically collated results, the command line field, the menu of operating system platforms, and the results window presented in one screen;

receiving, by one or more of the hardware processors, a selected executable object via the graphical user interface from a user;

receiving, by one or more of the hardware processors via the graphical user interface, the selected one or more managed computers on which to execute the selected executable object;

determining whether the user is authorized to execute the selected executable object on the selected one or more managed computers;

in response to determining that the user is authorized to execute the selected executable object, determining whether the selected executable object has a parameter file and in response to determining that the selected executable object has a parameter file, allowing a user to customize the parameter file, and communicating by one or more of the hardware processors, to the selected one or more managed computers to execute the executable object with the customized parameter file, and dynamically collating by one or more of the hardware processors, results from the execution of the executable object on all of the selected one or more managed computers; and

in response to determining that the user is not authorized to execute the selected executable object, presenting an alert to the user via the graphical user interface,

wherein responsive to the user selecting a plurality of managed computers, the dynamically collating results comprises aggregating the results from the plurality of managed computers.

11. The method of claim 10, further comprising:

in response to determining that the user is authorized to execute the selected executable object, checking for existence of the selected executable object on the selected one or more managed computers, and in response to determining that the selected executable object exists, comparing a digital signature of the executable object with an approved digital signature associated with the executable object, and in response to determining that the digital signature matches with the approved digital signature, executing the selected executable object, and in response to determining that the digital signature does not match with the approved digital signature, downloading a version of the executable object from an approved server and executing the downloaded version of the executable object.

12. The method of claim 10, further comprising:

automatically mapping the selected executable object into a platform specific executable object compatible to execute on the selected one or more managed computers.

13. The method of claim 10, wherein the determining of whether the user is authorized to execute the selected executable object on the selected one or more managed computers comprises checking a control list containing allowable executable objects specific to a user role.

14. The method of claim 10, further comprising:

assigning a temporary role to the user, the temporary role determining which list of executable objects to use to validate the selected executable object.

15. The method of claim 10, wherein the executable object is a script.

16. The method of claim 10, wherein the executable object is a command.

17. The method of claim 10, further comprising presenting via the graphical user interface the dynamically collated results.

18. The method of claim 10, wherein the determining of whether the user is authorized to execute the selected executable object on the selected one or more managed computers comprises checking a list containing executable objects said user is disallowed from executing.