Method and system for simplifying distributed server management
A method and system for managing a large number of servers and their server components distributed throughout a heterogeneous computing environment is provided. In one embodiment, an authenticated user, such as a IT system administrator, can securely and simultaneously control and configure multiple servers, supporting different operating systems, through a “virtual server.” A virtual server is an abstract model representing a collection of actual target servers. To represent multiple physical servers as one virtual server, abstract system calls that extend execution of operating-system-specific system calls to multiple servers, regardless of their supported operating systems, are used. A virtual server is implemented by a virtual server client and a collection of virtual server agents associated with a collection of actual servers.
1. A method comprising:
providing through a graphical user interface (GUI) a representation of a plurality of servers as a single virtual server, the representation of the single virtual server implemented by a virtual server client and a plurality of virtual server agents, each server of the plurality of servers running a respective virtual server agent of the plurality of virtual server agents, and a first server of the plurality of servers having an operating system that differs from a second server of the plurality of servers;
receiving via the GUI a system call that requests a service from an operating system of at least one of the plurality of servers, the system call being provided via the GUI by a user with an authenticated identity for the GUI;
transmitting the system call to a first respective virtual server agent for the first server and to a second respective virtual server agent for the second server;
the first respective virtual server agent selecting a first local user identity for the first server based on a role associated with the authenticated identity;
the second respective virtual server agent selecting a second local user identity for the second server based on the role associated with the authenticated identity; and
executing the system call using the first local user identity on the first server and using the second local user identity on the second server.
2. The method of claim 1 , further comprising receiving, at the virtual server client, execution results from the first respective virtual server agent and the second respective virtual server agent.
3. The method of claim 1 , further comprising:
translating the system call to an abstract system call; and
translating, at the first respective virtual server agent and at the second respective virtual server agent, the abstract system call into an operating-system-specific system call.
4. The method of claim 1 , wherein permissions used to execute the system call on the first server differ from permissions used to execute the system call on the second server.
5. The method of claim 1 , wherein the first local user identity is granted access rights based on an access control list associated with the first server.
6. The method of claim 1 , wherein the first local user identity is a guest account that corresponds to the role.
7. A system comprising:
a virtual server management system running a virtual server client; and
a plurality of servers each running a respective virtual server agent, wherein a first server of the plurality of servers has an operating system that differs from a second server of the plurality of servers,
wherein the virtual server management system includes instructions that, when executed by at least one processor, cause the virtual server management system to perform operations including:
receiving via a graphical user interface (GUI) a system command that requests a service from an operating system of at least one of the plurality of servers, the system command being provided via the GUI by a user with an authenticated identity for the virtual server management system, and
transmitting, by the virtual server client, the system command to at least some of the plurality of servers, and
wherein each respective virtual server agent includes instructions that, when executed by at least one processor of its respective server of the plurality of servers, cause the respective virtual server agent to perform operations including:
receiving the system command,
mapping the authenticated identity to a local user identity for the respective server of the plurality of servers, the mapping being based on a role associated with the authenticated identity, and
executing the system command on the respective server using the local user identity.
8. The system of claim 7 , wherein the mapping on a first server of the plurality of servers maps the authenticated identity to a first local user identity and the mapping on a second server of the plurality of servers maps the authenticated identity to a second local user identity.
9. The system of claim 8 , wherein permissions used to execute the system command on the first server differ from permissions used to execute the system command on the second server.
10. The system of claim 7 , wherein the virtual server management system further includes instructions that cause the virtual server management system to receive execution results from the respective virtual server agents of the at least some of the plurality of servers.
11. The system of claim 7 , wherein the local user identity is granted access rights based on an access control list associated with the respective server.
12. The system of claim 7 , wherein the local user identity is a guest account that corresponds to the role.
13. The system of claim 7 , wherein:
the virtual server client further includes instructions that cause the virtual server management system to translate the system command to an abstract system command, wherein the abstract system command is transmitted to the at least some of the plurality of servers; and
each respective virtual server agent includes instructions that cause the respective virtual server agent to translate the abstract system command into an operating-system-specific system command for the respective server.
14. The system of claim 7 , wherein the local user identity has access rights based on an access control list associated with the respective server.
15. The system of claim 7 , wherein the local user identity is a guest account on the respective server that corresponds to the role.
16. The system of claim 7 , wherein the virtual server client is implemented by a network-aware code library.
17. The system of claim 7 , wherein:
the virtual server client further includes instructions that cause the virtual server client to encrypt the system command prior to transmitting the system command; and
each respective virtual server agent includes instructions that cause the respective virtual server agent to decrypt the system command.
18. The system of claim 7 , wherein the virtual server client further includes instructions that cause the virtual server client to identify the at least some of the plurality of servers based on information included in the system command.
19. The system of claim 18 , wherein the information is a network address.
20. The system of claim 18 , wherein the information identifies a target server of the plurality of servers and identifying the at least some of the plurality of servers includes identifying servers in a group to which the target server belongs.