Non-invasive method and system for automated administration of diverse security constrained servers

• US 9,578,031 B2
• Filed: 09/29/2014
• Issued: 02/21/2017
• Est. Priority Date: 02/11/2005
• Status: Active Grant

• Current Assignee: Hewlett Packard Enterprise Development LP (Hewlett-Packard Enterprise Company)
• Original Assignee: Hewlett Packard Enterprise Development LP (Hewlett-Packard Enterprise Company)
• Inventors: Chakravarty, Srinath S.
• Primary Examiner(s): Christensen, Scott B
• Assistant Examiner(s): RICHARDSON, THOMAS W
• Application Number:
  US14/500,228
• Publication Number:
  US 20150020171A1
• Time in Patent Office: 876 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: Y10S 707/959 Network

Abstract

A method of automatically administering servers is disclosed. The method includes automatically transmitting commands to at least one of the servers. Administrator level access is non-invasively obtained on the at least one of the servers utilizing the automatically transmitted commands. The at least one of the servers is administered using the administrator level access and the automatically transmitted commands.

Claims

1. A computerized method of automatically administering a plurality of servers, the computerized method comprising:

automatically transmitting, with computer executing logic contained on a medium, a first set of the commands to the at least one of the plurality of servers, wherein the first set of the commands includes access commands configured to gain secure access to the at least one of the plurality of servers;

automatically and non-invasively obtaining, with the computer executing logic contained on the medium, administrator level access on the at least one of the plurality of the servers using the first set of automatically transmitted commands;

automatically transmitting, with the computer executing logic contained on the medium, a second set of the commands to the at least one of the plurality of servers wherein the second set of the commands include action commands configured to perform administrative tasks on the at least one of the plurality of servers; and

intrusively administering the at least one of the plurality of the servers, with the computer executing logic contained on the medium and an agent installed on the at least one of the plurality of servers, using the administrator level access and the second set of automatically transmitted commands.

2. The method of claim 1, wherein the administrator level access is a root level access.

3. The method of claim 1, wherein the administering the at least one of the plurality of the servers includes changing a root level password with the computer executing logic contained on the medium and the agent installed on the at least one of the plurality of servers.

4. The method of claim 1, comprising querying a storage device, with the computer executing logic contained on the medium, for information relating to profile and access parameters for the plurality servers,

wherein a resultant list obtained from the querying at least partially determines which sets of commands will be automatically transmitted to at least one of the plurality of servers, and

wherein the storage device is remote from the plurality of servers.

5. The method of claim 1, wherein the second set of automatically transmitted commands include entry commands and action commands, further comprising:

utilizing the entry commands, with the computer executing logic contained on the medium, to gain administrator level access to the at least one of the plurality of servers with login commands; and

utilizing the action commands, with the computer executing logic contained on the medium and the agent installed on the at least one of the plurality of servers, to intrusively administer the at least one of the plurality of servers.

6. The method of claim 5, wherein for the transmittal of each of the access commands, entry commands, and action commands the method further comprises:

receiving, with the computer executing logic contained on the medium, a response from the at least one of the plurality of servers;

searching, with the computer executing logic contained on the medium, the response for at least one keyword;

cross-referencing, with the computer executing logic contained on the medium, the at least one keyword with an empirical table; and

determining, with the computer executing logic contained on the medium, a next command to transmit to the at least one of the plurality of servers based at least partially upon an entry cross-referenced with the at least one keyword.

7. The method of claim 5, wherein for the transmittal of each of the access commands, entry commands, and action commands the method further comprises:

receiving, with the computer executing logic contained on the medium, a response from the at least one of the plurality of servers;

searching, with the computer executing logic contained on the medium, the response for at least one keyword;

cross-referencing, with the computer executing logic contained on the medium, the at least one keyword with an empirical table; and

determining, with the computer executing logic contained on the medium, a next command to transmit to the at least one of the plurality of servers based at least partially upon an entry cross-referenced with the at least one keyword and state and event awareness information.

8. The method of claim 1, wherein the non-invasively obtaining administrator level access on the at least one of the plurality of the servers includes:

receiving, with the computer executing logic contained on the medium, a response from the at least one of the plurality of servers;

searching, with the computer executing logic contained on the medium, the response for at least one keyword;

cross-referencing, with the computer executing logic contained on the medium, the at least one keyword with an empirical table; and

determining, with the computer executing logic contained on the medium, a next command to transmit to the at least one of the plurality of servers based at least partially upon an entry cross-referenced with the at least one keyword.

9. A computer network administration system, comprising:

a non-transitory computer readable storage medium; and

software stored on the non-transitory computer readable storage medium, the software, when executed by a processor, to cause the processor to;

query a database for information relating to profile and access parameters for a plurality of servers, wherein a resultant list obtained from the querying at least partially determines which set of commands will be automatically transmitted to at least one of the plurality of servers wherein the database is remote from the plurality of servers;

automatically transmit a first set of the commands to the at least one of the plurality of servers, wherein the first set of the commands includes access commands configured to gain secure access to the at least one of the plurality of the servers;

non-invasively obtain administrator level access on the at least one of the plurality of the servers using the first set of automatically transmitted commands;

automatically transmit a second set of the commands to the at least one of the plurality of servers, wherein the second set of the commands include action commands configured to perform administrative tasks on the at least one of the plurality of servers; and

intrusively administer, with an agent installed on the at least one of the plurality of servers, the at least one of the plurality of the servers using the administrator level access and the second set of automatically transmitted commands.

10. The computer network administration system of claim 9, wherein the administrator level access is a root level access.

11. The computer network administration system of claim 9, wherein the software to cause the processor to administer the at least one of the plurality of the servers causes the processor to change a root level password.

12. The computer network administration system of claim 9, wherein the plurality of servers includes a plurality of diverse security constrained servers.

13. The computer network administration system of claim 9, wherein the second set of automatically transmitted commands include entry commands and action commands, and the software is further to cause the processor to:

utilize the entry commands to gain administrator level access to the at least one of the plurality of servers with login commands; and

utilize the action commands to intrusively administer the at least one of the plurality of servers.

14. The computer network administration system of claim 13, wherein the software to cause the processor to transmit each of the access commands, entry commands, and action commands is to cause the processor to:

receive a response from the at least one of the plurality of servers;

search the response for at least one keyword;

cross-reference the at least one keyword with an empirical table; and

determine a next command to transmit to the at least one of the plurality of servers based at least partially upon an entry cross-referenced with the at least one keyword.

15. The computer network administration system of claim 13, wherein the software to cause the processor to transmit each of the access commands, entry commands, and action commands is to cause the processor to:

receive a response from the at least one of the plurality of servers;

search the response for at least one keyword;

cross-reference the at least one keyword with an empirical table; and

determine a next command to transmit to the at least one of the plurality of servers based at least partially upon an entry cross-referenced with the at least one keyword and state and event awareness information.

16. The computer network administration system of claim 9, wherein the software to cause the processor to non-invasively obtain administrator level access on the at least one of the plurality of the servers is to cause the processor to:

receive a response from the at least one of the plurality of servers;

search the response for at least one keyword;

cross-reference the at least one keyword with an empirical table; and

determine a next command to transmit to the at least one of the plurality of servers based at least partially upon an entry cross-referenced with the at least one keyword.

17. A computerized method of automatically administering a plurality of diverse servers, the computerized method comprising:

querying, with a computer executing logic contained on a medium, to at least partially determine which sets of commands to automatically transmit to at least one of the plurality of servers;

automatically transmitting, with the computer executing logic contained on the medium, a first set of the commands to the at least one of the plurality of servers, wherein the first set of the commands includes access commands configured to gain secure access to the at least one of the plurality of servers;

automatically and non-invasively obtaining, with the computer executing logic contained on the medium, administrator level access on the at least one of the plurality of the servers using the first set of automatically transmitted commands;

automatically transmitting, with the computer executing logic contained on the medium, a second set of the commands to the at least one of the plurality of servers wherein the second set of the commands include action commands configured to perform administrative tasks on the at least one of the plurality of servers; and

intrusively administering the at least one of the plurality of the servers, with the computer executing logic contained on the medium and an agent installed on the at least one of the plurality of servers, using the administrator level access and the second set of automatically transmitted commands.

18. The method of claim 17, wherein the administrator level access is a root level access.

19. The method of claim 17, wherein the querying includes querying a storage medium remote from the plurality of servers.

20. The method of claim 17, wherein the administering the at least one of the plurality of the servers includes changing a root level password with the computer executing logic on a medium and the agent installed on the at least one of the plurality of servers.