Method and system for simplifying distributed server management

• US 10,659,286 B2
• Filed: 10/13/2017
• Issued: 05/19/2020
• Est. Priority Date: 06/12/2002
• Status: Active Grant

• Current Assignee: BladeLogic Incorporated (KKR & Co., Inc.)
• Original Assignee: BladeLogic Incorporated (KKR & Co., Inc.)
• Inventors: Kraus, Thomas M., Manwani, Vijay G., Muddana, Sekhar
• Primary Examiner(s): Gee, Jason K
• Application Number:
  US15/783,355
• Publication Number:
  US 20180069747A1
• Time in Patent Office: 949 Days
• CPC Class Codes: G06F 11/1471 involving logging of persistent data for recovery
• CPC Class Codes: G06F 2201/84 Using snapshots, i.e. a logical point-in-time copy of the data
• CPC Class Codes: G06F 9/466 Transaction processing
• CPC Class Codes: H04L 41/022 Multivendor or multi-standard integration
• CPC Class Codes: H04L 41/0803 Configuration setting
• CPC Class Codes: H04L 41/0806 for initial configuration or provisioning, e.g. plug-and-play
• CPC Class Codes: H04L 41/082 the condition being updates or upgrades of network functionality
• CPC Class Codes: H04L 41/084 Configuration by using pre-existing information, e.g. using templates or copying from other elements
• CPC Class Codes: H04L 41/0853 by actively collecting configuration information or by backing up configuration information
• CPC Class Codes: H04L 41/0863 by rolling back to previous configuration versions
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/1001 for accessing one among a plurality of replicated servers
• CPC Class Codes: H04L 67/1008 based on parameters of servers, e.g. available memory or workload monitoring of computer activity G06F11/30
• CPC Class Codes: H04L 67/1014 based on the content of a request
• CPC Class Codes: H04L 67/1034 Reaction to server failures by a load balancer

Abstract

A method and system for managing a large number of servers and their server components distributed throughout a heterogeneous computing environment is provided. In one embodiment, an authenticated user, such as a IT system administrator, can securely and simultaneously control and configure multiple servers, supporting different operating systems, through a “virtual server.” A virtual server is an abstract model representing a collection of actual target servers. To represent multiple physical servers as one virtual server, abstract system calls that extend execution of operating-system-specific system calls to multiple servers, regardless of their supported operating systems, are used. A virtual server is implemented by a virtual server client and a collection of virtual server agents associated with a collection of actual servers.

Claims

1. A method comprising:

providing through a graphical user interface (GUI) a representation of a plurality of servers as a single virtual server, the representation of the single virtual server implemented by a virtual server client and a plurality of virtual server agents, each server of the plurality of servers running a respective virtual server agent of the plurality of virtual server agents, and a first server of the plurality of servers having an operating system that differs from a second server of the plurality of servers;

receiving via the GUI a system call that requests a service from an operating system of at least one of the plurality of servers, the system call being provided via the GUI by a user with an authenticated identity for the GUI;

transmitting the system call to a first respective virtual server agent for the first server and to a second respective virtual server agent for the second server;

the first respective virtual server agent selecting a first local user identity for the first server based on a role associated with the authenticated identity;

the second respective virtual server agent selecting a second local user identity for the second server based on the role associated with the authenticated identity; and

executing the system call using the first local user identity on the first server and using the second local user identity on the second server.

2. The method of claim 1, further comprising receiving, at the virtual server client, execution results from the first respective virtual server agent and the second respective virtual server agent.

3. The method of claim 1, further comprising:

translating the system call to an abstract system call; and

translating, at the first respective virtual server agent and at the second respective virtual server agent, the abstract system call into an operating-system-specific system call.

4. The method of claim 1, wherein permissions used to execute the system call on the first server differ from permissions used to execute the system call on the second server.

5. The method of claim 1, wherein the first local user identity is granted access rights based on an access control list associated with the first server.

6. The method of claim 1, wherein the first local user identity is a guest account that corresponds to the role.

7. A system comprising:

a virtual server management system running a virtual server client; and

a plurality of servers each running a respective virtual server agent, wherein a first server of the plurality of servers has an operating system that differs from a second server of the plurality of servers,

wherein the virtual server management system includes instructions that, when executed by at least one processor, cause the virtual server management system to perform operations including;

receiving via a graphical user interface (GUI) a system command that requests a service from an operating system of at least one of the plurality of servers, the system command being provided via the GUI by a user with an authenticated identity for the virtual server management system, and

transmitting, by the virtual server client, the system command to at least some of the plurality of servers, and

wherein each respective virtual server agent includes instructions that, when executed by at least one processor of its respective server of the plurality of servers, cause the respective virtual server agent to perform operations including;

receiving the system command,

mapping the authenticated identity to a local user identity for the respective server of the plurality of servers, the mapping being based on a role associated with the authenticated identity, and

executing the system command on the respective server using the local user identity.

8. The system of claim 7, wherein the mapping on a first server of the plurality of servers maps the authenticated identity to a first local user identity and the mapping on a second server of the plurality of servers maps the authenticated identity to a second local user identity.

9. The system of claim 8, wherein permissions used to execute the system command on the first server differ from permissions used to execute the system command on the second server.

10. The system of claim 7, wherein the virtual server management system further includes instructions that cause the virtual server management system to receive execution results from the respective virtual server agents of the at least some of the plurality of servers.

11. The system of claim 7, wherein the local user identity is granted access rights based on an access control list associated with the respective server.

12. The system of claim 7, wherein the local user identity is a guest account that corresponds to the role.

13. The system of claim 7, wherein:

the virtual server client further includes instructions that cause the virtual server management system to translate the system command to an abstract system command, wherein the abstract system command is transmitted to the at least some of the plurality of servers; and

each respective virtual server agent includes instructions that cause the respective virtual server agent to translate the abstract system command into an operating-system-specific system command for the respective server.

14. The system of claim 7, wherein the local user identity has access rights based on an access control list associated with the respective server.

15. The system of claim 7, wherein the local user identity is a guest account on the respective server that corresponds to the role.

16. The system of claim 7, wherein the virtual server client is implemented by a network-aware code library.

17. The system of claim 7, wherein:

the virtual server client further includes instructions that cause the virtual server client to encrypt the system command prior to transmitting the system command; and

each respective virtual server agent includes instructions that cause the respective virtual server agent to decrypt the system command.

18. The system of claim 7, wherein the virtual server client further includes instructions that cause the virtual server client to identify the at least some of the plurality of servers based on information included in the system command.

19. The system of claim 18, wherein the information is a network address.

20. The system of claim 18, wherein the information identifies a target server of the plurality of servers and identifying the at least some of the plurality of servers includes identifying servers in a group to which the target server belongs.