CN109150921B - A login method, device, device and storage medium for a multi-node cluster - Google Patents
A login method, device, device and storage medium for a multi-node cluster Download PDFInfo
- Publication number
- CN109150921B CN109150921B CN201811307912.8A CN201811307912A CN109150921B CN 109150921 B CN109150921 B CN 109150921B CN 201811307912 A CN201811307912 A CN 201811307912A CN 109150921 B CN109150921 B CN 109150921B
- Authority
- CN
- China
- Prior art keywords
- user
- node
- cluster
- user group
- resource
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
- 238000000034 method Methods 0.000 title claims abstract description 33
- 238000012544 monitoring process Methods 0.000 claims description 18
- 238000004590 computer program Methods 0.000 claims description 11
- 230000001419 dependent effect Effects 0.000 description 3
- 238000010586 diagram Methods 0.000 description 2
- 238000012986 modification Methods 0.000 description 2
- 230000004048 modification Effects 0.000 description 2
- 230000009286 beneficial effect Effects 0.000 description 1
- 238000005516 engineering process Methods 0.000 description 1
- 230000000750 progressive effect Effects 0.000 description 1
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/01—Protocols
- H04L67/10—Protocols in which an application is distributed across nodes in the network
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
- G06F21/31—User authentication
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
- H04L63/0815—Network architectures or network communication protocols for network security for authentication of entities providing single-sign-on or federations
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Theoretical Computer Science (AREA)
- Computer Hardware Design (AREA)
- General Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computing Systems (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Software Systems (AREA)
- Information Retrieval, Db Structures And Fs Structures Therefor (AREA)
- Information Transfer Between Computers (AREA)
Abstract
本发明公开了一种多节点集群的登录方法、装置、设备以及计算机可读存储介质，包括：分别利用集群资源管理库的用户agent和用户组agent创建所述集群资源管理库的用户资源和用户组资源；设置所述用户资源依赖于所述用户组资源的约束条件；依据所述约束条件，分别在集群的各个节点中创建相同的用户组和用户，以便于通过同一用户实现对所述集群中各个节点的登录。本发明所提供的方法、装置、设备以及计算机可读存储介质，利用集群资源管理库的用户agent和用户组agent，在所述集群的各个节点中创建相同的用户组和用户；从而在所述集群中的各个节点不加入域的情况下，通过同一用户登录所述集群中的各个节点，节约了硬件成本。
The invention discloses a method, device, equipment and computer-readable storage medium for logging in to a multi-node cluster. group resources; setting the constraints that the user resources depend on the user group resources; according to the constraints, create the same user groups and users in each node of the cluster, so that the same user can be used to control the cluster. log in to each node. The method, apparatus, device and computer-readable storage medium provided by the present invention utilize the user agent and user group agent of the cluster resource management library to create the same user group and user in each node of the cluster; When each node in the cluster does not join the domain, the same user logs in to each node in the cluster, which saves hardware costs.
Description
Technical Field
The present invention relates to the field of cluster server technologies, and in particular, to a method, an apparatus, a device, and a computer-readable storage medium for logging in a multi-node cluster.
Background
In the prior art, each node of a multi-node cluster server is added into the same domain, and login of each node can be conveniently realized in a domain user authentication mode, but the support of a domain control server is required, so that the hardware cost of the cluster is increased.
In summary, it can be seen that how to implement login for each node in a multi-node cluster without adding a domain to a cluster node is a problem to be solved at present.
Disclosure of Invention
The invention aims to provide a login method, a login device and a login equipment for a multi-node cluster and a computer readable storage medium, so as to solve the problem that hardware cost is wasted because the login of each node of a cluster server needs to be realized through the support of a domain control server in the prior art.
To solve the above technical problem, the present invention provides a multi-node cluster login method, including: respectively utilizing a user agent and a user group agent of a cluster resource management library to create user resources and user group resources of the cluster resource management library; setting a constraint condition that the user resource is dependent on the user group resource; and respectively creating the same user group and the same user in each node of the cluster according to the constraint condition so as to conveniently realize the login of each node in the cluster through the same user.
Preferably, the creating the same user group and user in each node of the cluster according to the constraint condition includes:
respectively monitoring whether the user groups on each node of the cluster change or not by using the monitoring command of the user group agent;
and when the situation that the user group on the first node in the cluster is changed is monitored, updating the user group on the first node by using the updating command of the user group agent.
Preferably, when it is monitored that the user group on the first node in the cluster changes, updating the user group on the first node by using the update command of the user group agent includes:
when the situation that the user group on the first node in the cluster changes is monitored, executing an updating command by using the user group agent when the cluster is started;
comparing the information in the user group resource with the user group stored on the first node in a local file;
adding a user group which exists in the user group resource but does not exist in the local file to the first node;
deleting the user group on the first node that exists in the local file but does not exist in the user group resource.
Preferably, the creating the same user group and user in each node of the cluster according to the constraint condition includes:
respectively monitoring whether the users on each node of the cluster change or not by using the monitoring commands of the user agents;
and when the situation that the user on the second node in the cluster changes is monitored, updating the user on the second node by using the updating command of the user agent.
Preferably, when it is monitored that the user on the second node in the cluster changes, updating the user on the second node by using the update command of the user agent includes:
when the situation that the user on the second node in the cluster changes is monitored, when the cluster is started, the user agent is used for executing an updating command;
comparing the information in the user resource with the user stored on the second node in the local file;
adding users existing in the user resources but not existing in the local file to the first node;
deleting the user on the second node that exists in the local file but not in the user resource.
The invention also provides a login device of the multi-node cluster, which comprises the following components:
the creating module is used for creating the user resources and the user group resources of the cluster resource management library by using the user agent and the user group agent of the cluster resource management library respectively;
the setting module is used for setting a constraint condition that the user resource depends on the user group resource;
and the login module is used for respectively creating the same user group and the same user in each node of the cluster according to the constraint condition so as to conveniently realize the login of each node in the cluster through the same user.
Preferably, the login module is specifically configured to:
respectively monitoring whether the user groups on each node of the cluster change or not by using the monitoring command of the user group agent;
and when the situation that the user group on the first node in the cluster is changed is monitored, updating the user group on the first node by using the updating command of the user group agent.
Preferably, when it is monitored that the user group on the first node in the cluster changes, updating the user group on the first node by using the update command of the user group agent includes:
when the situation that the user group on the first node in the cluster changes is monitored, executing an updating command by using the user group agent when the cluster is started;
comparing the information in the user group resource with the user group stored on the first node in a local file;
adding a user group which exists in the user group resource but does not exist in the local file to the first node;
deleting the user group on the first node that exists in the local file but does not exist in the user group resource.
The invention also provides a login device of the multi-node cluster, which comprises the following components:
a memory for storing a computer program; and the processor is used for realizing the steps of the multi-node cluster login method when executing the computer program.
The present invention also provides a computer-readable storage medium, on which a computer program is stored, which, when executed by a processor, implements the steps of the above-mentioned multi-node cluster login method.
The logging-in method of the multi-node cluster provided by the invention utilizes the user agent of the cluster resource management library to create the user resource of the cluster resource management library and utilizes the user agent of the cluster logging-in library to create the user group resource of the multi-node cluster. And setting a constraint condition that the user resource depends on the user group resource. And respectively creating the same user group and user in each node of the multi-node cluster server according to the constraint conditions, so that the login of each node in the cluster can be realized through the same user. The invention utilizes the user agent and the user group agent of the cluster resource management library to establish the user resources and the user group resources of the cluster resource management library, thereby being convenient to establish the same user group and user in each node of the cluster. Therefore, under the condition that each node in the cluster is not added with a domain, the login of each node in the cluster is realized through the same user, and the hardware cost is saved. In addition, the same user group and user do not need to be manually established at each node of the cluster, the cluster node login operation is simplified, and the login efficiency is improved. Accordingly, the login device, the equipment and the computer readable storage medium of the multi-node cluster provided by the invention have the beneficial effects.
Drawings
In order to more clearly illustrate the embodiments or technical solutions of the present invention, the drawings used in the description of the embodiments or the prior art will be briefly described below, and it is obvious that the drawings in the following description are only some embodiments of the present invention, and it is obvious for those skilled in the art that other drawings can be obtained based on these drawings without creative efforts.
FIG. 1 is a flowchart of a multi-node cluster login method according to a first embodiment of the present invention;
FIG. 2 is a flowchart illustrating a login method for a multi-node cluster according to a second embodiment of the present invention;
fig. 3 is a block diagram of a login apparatus of a multi-node cluster according to an embodiment of the present invention.
Detailed Description
The core of the invention is to provide a multi-node cluster login method, a device, equipment and a computer readable storage medium, wherein the same user group and user are created in each node of a cluster by adding a user agent and a user group agent of a cluster resource management library, so that the login of each node of the cluster is realized under the condition that the cluster node does not need to join a domain.
In order that those skilled in the art will better understand the disclosure, the invention will be described in further detail with reference to the accompanying drawings and specific embodiments. It is to be understood that the described embodiments are merely exemplary of the invention, and not restrictive of the full scope of the invention. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.
Referring to fig. 1, fig. 1 is a flowchart illustrating a login method for a multi-node cluster according to a first embodiment of the present invention; the specific operation steps are as follows:
step S101: respectively utilizing a user agent and a user group agent of a cluster resource management library to create user resources and user group resources of the cluster resource management library;
and creating user resources and user group resources of the Pacemaker by using the user agent and the user group agent of the Pacemaker cluster resource management library.
Step S102: setting a constraint condition that the user resource is dependent on the user group resource;
because a user group needs to be appointed when a user is added into a node of the cluster, the appointed user group needs to be ensured to exist when the user is added, and therefore, a constraint condition that user resources depend on user group resources needs to be set; namely, the user group resource is started first, and then the user resource is started.
Step S103: and respectively creating the same user group and the same user in each node of the cluster according to the constraint condition so as to conveniently realize the login of each node in the cluster through the same user.
Through resource synchronization and according to constraint conditions, the same user group and users are respectively established in each node of the cluster, so that the same user can log in all nodes in the cluster, the logging in of all nodes in the cluster is realized through the same user and one user under the condition that the nodes in the cluster are not added into a domain, and the hardware cost of a cluster system is saved.
Based on the above embodiment, in this embodiment, taking a user group as an example, after synchronizing the user group resources created by using the user group agent of the Pacemaker to each node of the cluster, using the monitoring command of the user group agent to monitor whether the user group resources on each node change or not, respectively. And if the user group resources of a certain node are monitored to change, updating the user group resources on the node by using the updating command of the user group agent. Referring to fig. 2, fig. 2 is a flowchart illustrating a login method for a multi-node cluster according to a second embodiment of the present invention; the specific operation steps are as follows:
step S201: respectively utilizing a user agent and a user group agent of the Pacemaker to create user resources and user group resources of the cluster resource management library;
step S202: setting a constraint condition that the user resource is dependent on the user group resource;
step S203: respectively creating the same user group and user in each node of the cluster according to the constraint condition;
step S204: storing the information of the user group resources created by the user group agent of the Pacemaker into a local file;
step S205: respectively monitoring whether the user groups on each node of the cluster change or not by using the monitoring command of the user group agent;
and respectively monitoring whether the user groups on each node of the cluster change or not by using a Monitor command of the user group agent.
Step S206: when the situation that the user group on the first node in the cluster changes is monitored, executing an updating command by using the user group agent when the cluster is started;
and updating the user group on the first node by using the Update command of the user group agent.
Step S207: comparing the information in the user group resource with the user group stored on the first node in a local file;
step S208: adding a user group which exists in the user group resource but does not exist in the local file to the first node;
step S209: deleting the user group existing in the local file and not existing in the user group resource on the first node so as to create the same user group resource in each node of the cluster, thereby logging in each node of the cluster by using a local authentication mode.
Based on the above embodiment, in other embodiments provided by the present invention, after the same user group and user are respectively created in each node of the cluster, whether the user on each node of the cluster changes or not can be respectively monitored by using the monitoring command of the user agent; and when the situation that the user on the second node in the cluster changes is monitored, updating the user on the second node by using the updating command of the user agent. When a user is added or deleted, the user resource is updated, after the monitoring in the user agent detects that the user resource information on a certain node in the cluster is inconsistent, the updating operation is executed, and the user resource on the node is updated, so that the same user resource is created on all the nodes in the cluster, and the login of all the nodes in the cluster is realized through one user. The embodiment saves the hardware cost of the cluster login system; the cluster node login operation is simplified, and the login efficiency is improved.
Referring to fig. 3, fig. 3 is a block diagram illustrating a login apparatus of a multi-node cluster according to an embodiment of the present invention; the specific device may include:
a creating module 100, configured to create a user resource and a user group resource of a cluster resource management library by using a user agent and a user group agent of the cluster resource management library, respectively;
a setting module 200, configured to set a constraint condition that the user resource depends on the user group resource;
the login module 300 is configured to create the same user group and user in each node of the cluster according to the constraint condition, so as to facilitate login to each node in the cluster by the same user.
The multi-node cluster login device in this embodiment is used for implementing the aforementioned multi-node cluster login method, and therefore specific embodiments in the multi-node cluster login device may be found in the foregoing embodiments of the multi-node cluster login method, for example, the creating module 100, the setting module 200, and the login module 300 are respectively used for implementing steps S101, S102, and S103 in the aforementioned multi-node cluster login method, so that the specific embodiments thereof may refer to descriptions of corresponding embodiments of each part, and are not described herein again.
The specific embodiment of the present invention further provides a login device for a multi-node cluster, including: a memory for storing a computer program; and the processor is used for realizing the steps of the multi-node cluster login method when executing the computer program.
The specific embodiment of the present invention further provides a computer-readable storage medium, where a computer program is stored on the computer-readable storage medium, and when the computer program is executed by a processor, the steps of the login method for a multi-node cluster are implemented.
The embodiments are described in a progressive manner, each embodiment focuses on differences from other embodiments, and the same or similar parts among the embodiments are referred to each other. The device disclosed by the embodiment corresponds to the method disclosed by the embodiment, so that the description is simple, and the relevant points can be referred to the method part for description.
Those of skill would further appreciate that the various illustrative elements and algorithm steps described in connection with the embodiments disclosed herein may be implemented as electronic hardware, computer software, or combinations of both, and that the various illustrative components and steps have been described above generally in terms of their functionality in order to clearly illustrate this interchangeability of hardware and software. Whether such functionality is implemented as hardware or software depends upon the particular application and design constraints imposed on the implementation. Skilled artisans may implement the described functionality in varying ways for each particular application, but such implementation decisions should not be interpreted as causing a departure from the scope of the present invention.
The steps of a method or algorithm described in connection with the embodiments disclosed herein may be embodied directly in hardware, in a software module executed by a processor, or in a combination of the two. A software module may reside in Random Access Memory (RAM), memory, Read Only Memory (ROM), electrically programmable ROM, electrically erasable programmable ROM, registers, hard disk, a removable disk, a CD-ROM, or any other form of storage medium known in the art.
The multi-node cluster login method, apparatus, device and computer readable storage medium provided by the present invention are described in detail above. The principles and embodiments of the present invention are explained herein using specific examples, which are presented only to assist in understanding the method and its core concepts. It should be noted that, for those skilled in the art, it is possible to make various improvements and modifications to the present invention without departing from the principle of the present invention, and those improvements and modifications also fall within the scope of the claims of the present invention.
Claims (10)
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201811307912.8A CN109150921B (en) | 2018-11-05 | 2018-11-05 | A login method, device, device and storage medium for a multi-node cluster |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201811307912.8A CN109150921B (en) | 2018-11-05 | 2018-11-05 | A login method, device, device and storage medium for a multi-node cluster |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN109150921A CN109150921A (en) | 2019-01-04 |
| CN109150921B true CN109150921B (en) | 2021-06-29 |
Family
ID=64807799
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201811307912.8A Active CN109150921B (en) | 2018-11-05 | 2018-11-05 | A login method, device, device and storage medium for a multi-node cluster |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN109150921B (en) |
Families Citing this family (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN113806011B (en) * | 2021-08-17 | 2023-12-19 | 曙光信息产业股份有限公司 | Cluster resource control method and device, cluster and computer readable storage medium |
| CN113868194B (en) * | 2021-09-09 | 2024-01-23 | 苏州浪潮智能科技有限公司 | Management method, device, system and medium for local user group of storage equipment |
Citations (9)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101064695A (en) * | 2007-05-16 | 2007-10-31 | 杭州看吧科技有限公司 | P2P(Peer to Peer) safe connection method |
| US8185938B2 (en) * | 2001-03-29 | 2012-05-22 | International Business Machines Corporation | Method and system for network single-sign-on using a public key certificate and an associated attribute certificate |
| CN104145261A (en) * | 2012-02-23 | 2014-11-12 | 国际商业机器公司 | Identity provider discovery service using publish-subscribe model |
| CN104301418A (en) * | 2014-10-23 | 2015-01-21 | 西安未来国际信息股份有限公司 | A SAML-based cross-domain single sign-on system and login method |
| CN105119973A (en) * | 2012-11-05 | 2015-12-02 | 北京奇虎科技有限公司 | User information processing method and user information processing server |
| CN105247529A (en) * | 2013-04-30 | 2016-01-13 | 微软技术许可有限责任公司 | Synchronizing credential hashes between directory services |
| CN107707570A (en) * | 2017-11-13 | 2018-02-16 | 山东省农村信用社联合社 | Cross-domain single logs in integrated approach and system |
| CN108055314A (en) * | 2017-12-08 | 2018-05-18 | 锐捷网络股份有限公司 | The management method and group system of a kind of group system |
| CN108259611A (en) * | 2018-01-22 | 2018-07-06 | 郑州云海信息技术有限公司 | Cluster docker management methods, device, system and readable storage medium storing program for executing |
Family Cites Families (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| JP6226689B2 (en) * | 2013-10-16 | 2017-11-08 | キヤノン株式会社 | Information processing system, information processing method, and program |
| US9961068B2 (en) * | 2015-07-21 | 2018-05-01 | Bank Of America Corporation | Single sign-on for interconnected computer systems |
-
2018
- 2018-11-05 CN CN201811307912.8A patent/CN109150921B/en active Active
Patent Citations (9)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US8185938B2 (en) * | 2001-03-29 | 2012-05-22 | International Business Machines Corporation | Method and system for network single-sign-on using a public key certificate and an associated attribute certificate |
| CN101064695A (en) * | 2007-05-16 | 2007-10-31 | 杭州看吧科技有限公司 | P2P(Peer to Peer) safe connection method |
| CN104145261A (en) * | 2012-02-23 | 2014-11-12 | 国际商业机器公司 | Identity provider discovery service using publish-subscribe model |
| CN105119973A (en) * | 2012-11-05 | 2015-12-02 | 北京奇虎科技有限公司 | User information processing method and user information processing server |
| CN105247529A (en) * | 2013-04-30 | 2016-01-13 | 微软技术许可有限责任公司 | Synchronizing credential hashes between directory services |
| CN104301418A (en) * | 2014-10-23 | 2015-01-21 | 西安未来国际信息股份有限公司 | A SAML-based cross-domain single sign-on system and login method |
| CN107707570A (en) * | 2017-11-13 | 2018-02-16 | 山东省农村信用社联合社 | Cross-domain single logs in integrated approach and system |
| CN108055314A (en) * | 2017-12-08 | 2018-05-18 | 锐捷网络股份有限公司 | The management method and group system of a kind of group system |
| CN108259611A (en) * | 2018-01-22 | 2018-07-06 | 郑州云海信息技术有限公司 | Cluster docker management methods, device, system and readable storage medium storing program for executing |
Non-Patent Citations (2)
| Title |
|---|
| 云计算环境中的跨域认证机制研究;黄文依;《中国优秀硕士学位论文全文数据库(电子期刊)信息科技辑》;20121015(第10期);全文 * |
| 多域单点登录系统的设计与实现;缪琦;《中国优秀硕士学位论文全文数据库(电子期刊)信息科技辑》;20071215(第06期);全文 * |
Also Published As
| Publication number | Publication date |
|---|---|
| CN109150921A (en) | 2019-01-04 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US8161095B2 (en) | Distributed routing table interface | |
| CN108683679B (en) | Multi-account login method, device, equipment and storage medium of Web APP | |
| CN109547524B (en) | User behavior storage method, device, device and storage medium based on Internet of Things | |
| JP5992511B2 (en) | Cloud service reconnection automation | |
| CN104488248B (en) | A kind of file synchronisation method, server and terminal | |
| JP2016522932A (en) | Synchronizing credential hashes across directory services | |
| JP2015501030A5 (en) | ||
| CN108881231A (en) | The method, apparatus and storage medium of synchronous account information in a kind of group system | |
| CN107797859B (en) | Scheduling method of timing task and scheduling server | |
| CN102082800A (en) | User request processing method and server | |
| CN108964993A (en) | Failure simulation method, device, equipment and readable storage medium storing program for executing based on dynamic proxy | |
| CN112769652A (en) | Node service monitoring method, device, equipment and medium | |
| CN109150921B (en) | A login method, device, device and storage medium for a multi-node cluster | |
| CN104281484A (en) | VM (virtual machine) migration method and device | |
| CN105278985A (en) | Method and system for deploying file system | |
| CN113518095A (en) | SSH cluster deployment method, device, equipment and storage medium | |
| CN107483238A (en) | A log management method, cluster management node and system | |
| US20110047202A1 (en) | Distributed algorithm for changing a shared value | |
| CN106878333B (en) | A third-party authentication method, device and application system server | |
| CN114666161B (en) | Component security policy management method, device, equipment and storage medium | |
| CN105208093A (en) | Construction method and system of calculation resource pool in cloud operation system | |
| JP6409527B2 (en) | Information processing system and information processing apparatus | |
| CN108052286A (en) | A kind of method, apparatus and equipment for managing heterogeneous storage devices | |
| CN109669642B (en) | Node joining method, system and device of storage system and readable storage medium | |
| TW201523447A (en) | Server system and firmware update method |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |