CN106452907A - Configuration management system - Google Patents

Abstract

The present invention relates to a configuration management system, including a web server, a registration server, a database server and a configuration management server; the web server is used to provide an operation interface, the registration server receives registration information, and the database server is used to store information in the configuration management system The configuration management server includes an agent program for performing configuration management on the system; the agent program is also used for performing user authority configuration and user authority query on the web server. In the configuration management system provided by the present invention, an agent program with configuration user authority and user authority query is set on the configuration management server, and the user can query his own authority through the agent program from the web server, thus solving the problem that the user cannot Permissions to query the problem.

Description

A configuration management system

technical field

The invention relates to the application field of computer information technology, in particular to a configuration management system.

Background technique

At present, each R&D unit of a large and medium-sized company has its own independent configuration management server, including CVS, SVN and other configuration management servers. They are managed in a decentralized manner, and their configuration management levels are different, and there are loose authority control and chaotic version management. , No backup, etc.; the configuration management operation is cumbersome, or the configuration management is performed through the original command line, or the configuration file is modified to achieve the purpose of management. There is no visual graphical interface for operation, which is inefficient and requires high quality administrators. This status quo has created unfavorable conditions for the company's standardized, safe, and intensive management. In terms of automatic construction, the level of each company is not uniform, and a unified platform is needed to comprehensively improve the level of automatic construction and software production.

The current configuration management system, such as SVN server and CVS server, does not have the function of querying the user's authority, so the user cannot query his own authority, which cannot meet the actual needs of the user.

Contents of the invention

The present invention provides a configuration management system for solving the above-mentioned problem that users cannot query their own rights.

A configuration management system, comprising a web server, a registration server, a database server and a configuration management server; the web server is used to provide an operation interface, the registration server receives registration information, and the database server is used to store a database in the configuration management system, The configuration management server includes an agent program for configuration management of the system; the agent program is also used for user authority configuration and user authority query to the web server.

In the configuration management system provided by the present invention, an agent program with configuration user authority and user authority query is set on the configuration management server, and the user can query his own authority through the agent program from the web server, thereby solving the problem that the user cannot Permissions to query the problem.

Further, the user authority of the web server is divided into system administrator, department administrator and warehouse administrator; the authority of the system administrator includes viewing the list of configuration management servers currently included in the system, and registered department administrators and warehouse administrators. The list of administrators, as well as the registration of department administrators and warehouse administrators for the new configuration management server entering the system; the authority of department administrators includes remote management, authorization and construction of all warehouses and users of the configuration management server of the department; The administrator's permission remotely manages, authorizes and builds authorized warehouses. Setting multi-layer user permissions for the web server can prevent users from exceeding their authority.

Further, the configuration management server includes at least one of a CVS server and an SVN server, and the agent program interacts with the CVS server or the SVN server through an API interface provided by the CVS server or the SVN server.

Further, the configuration management system further includes a backup server, configured to back up data of the configuration management server. Setting up a backup server can prevent data loss and ensure system security.

Further, the configuration management system also includes an automatic construction server, which is used to automatically obtain the corresponding code from the configuration management server according to the label or branch name input by the user and send it to the construction environment for automatic construction. By automatically building servers, it can reduce the difficulty of using the system and reduce the quality requirements for administrators.

Description of drawings

Fig. 1 is a diagram of the configuration management system provided by the embodiment;

Fig. 2 is a working principle diagram of an automatic backup server;

Fig. 3 is a communication interaction diagram of an automatic backup server;

Fig. 4 is a working principle diagram of the automatic construction server;

Figure 5 is a working principle diagram of the Web server.

detailed description

The present invention provides a configuration management system for solving the above-mentioned problem that users cannot query their own rights.

A configuration management system, comprising a web server, a registration server, a database server and a configuration management server; the web server is used to provide an operation interface, the registration server receives registration information, and the database server is used to store a database in the configuration management system, The configuration management server includes an agent program for configuration management of the system; the agent program is also used for user authority configuration and user authority query to the web server.

In the configuration management system provided by the present invention, an agent program with configuration user authority and user authority query is set on the configuration management server, and the user can query his own authority through the agent program from the web server, thereby solving the problem that the user cannot Permissions to query the problem.

The present invention will be described in detail below in conjunction with the accompanying drawings.

A configuration management system provided by this embodiment has a system structure as shown in Figure 1, including a web server, a database server, a registration server, an automatic backup server, an automatic construction server, and a configuration management server, wherein the configuration management server includes a CVS server and SVN server.

There are agent programs on the configuration management server, which are divided into CVS agent programs and SVN agent programs according to the configuration management server type. The agent program supports operations on warehouses, users, and groups in CVS and SVN servers. Each operation has a unique command number. Users send commands to the agent through the browser, and the agent parses the received commands and completes corresponding operations. The operations supported by the agent include warehouse operations, user operations, and permission operations. The SVN agent program also supports group operations. The permission operations include read-only, write-only, and read-write. When the agent is installed, it is necessary to set the path of the warehouse in the CVS or SVN server, the user file, the permission file; and the installation path of the CVS and SVN services, because the analysis of some commands needs to pass the commands provided by the CVS and SVN services Row processing, such as warehouse creation, deletion, etc.

The agent's warehouse operations include: adding warehouses, deleting warehouses, and enumerating warehouses.

(1) Increase warehouse: after the agent receives the operation command to increase warehouse from the browser, it inquires whether the warehouse that needs to be increased under the warehouse path exists, if not, calls the program (command line) of CVS or SVN to perform the operation of increasing warehouse;

(2) Delete warehouse: after the agent receives the delete warehouse operation command from the browser, it inquires whether the warehouse to be deleted under the warehouse path exists, and if it exists, calls the program (command line) of CVS or SVN to execute the delete warehouse operation;

(3) Enumerate warehouse: After receiving the enumerate warehouse operation command from the browser, the agent traverses all warehouses under the warehouse path, and feeds back to the browser in the form of a message;

The user operations of the agent include: adding users, deleting users, adding users to warehouses, removing users from warehouses, enumerating users, enumerating warehouse users, and warehouses managed by users.

(1) Add users: After the agent receives the command to add users from the browser, it will query whether the user exists in the user file (svn is the htpasswd file, cvs is a user file passwd corresponding to each warehouse), if not, the user added to the user file;

(2) delete the user: after the agent receives the delete user operation command from the browser, check whether the user exists in the user file, if it exists, the user is deleted from the user file;

(3) Add users to the warehouse: After receiving the operation command of adding users to the warehouse from the browser, the agent inquires whether the warehouse and users exist. If they exist and there is no record in the permission file, add the corresponding record in the permission file. (Permission file: svn is authz, cvs is two permission files for each warehouse, one read permission file, one write permission file);

(4) Remove the user from the warehouse: After the agent receives the command to remove the user from the warehouse from the browser, it will query whether there is a record in the authority file, and if so, delete the corresponding record in the authority file;

(5) Enumerate users: after the agent receives the enumerate user operation command from the browser, it enumerates all users in the user file and feeds back to the browser in the form of messages;

(6) Enumerate warehouse users: After receiving the enumeration warehouse user operation command from the browser, the agent extracts the user list of the warehouse from the permission file, and feeds back to the browser in the form of a message;

(7) User-managed warehouse: After receiving the user-managed warehouse operation command from the browser, the agent extracts the user-managed warehouse list from the authority file, and feeds back to the browser in the form of a message;

The agent's permission operations include: adding users to the warehouse, modifying the user's operation permissions on the warehouse.

(1) Adding users to the warehouse: After the agent receives the operation command of adding users to the warehouse from the browser, it queries whether the warehouse and the user exist. If there is no record in the authority file, the corresponding record is added to the authority file;

(2) Modify the user's operation authority to the warehouse: After the agent receives the operation command from the browser to modify the user's operation authority to the warehouse, it will query whether the user has the operation authority to the warehouse in the authority file. If there is no record, modify it authority;

The group operations of the SVN agent include: add group, remove group, add user to group, remove user from group, add group to warehouse, remove group from warehouse, modify group's administrative authority on warehouse, enumerate all group lists , Enumerate the list of users in the group, get the permissions of the group to the warehouse, and enumerate the list of warehouse groups.

(1) Add group: after the agent receives the operation command to add a group from the browser, it inquires whether the group exists in the authority file, and if it does not exist, add a record;

(2) Remove group: after the agent receives the remove group operation command from the browser, it will query whether the group exists in the authority file, and if it exists, delete the record;

(3) increase the user to the group: after the agent receives the increase user from the browser to the group operation command, if the group in the authority file exists, the user in the user file exists and the user is not in the group, the record is added in the authority file;

(4) Remove the user from the group: after the agent receives the remove user from the group operation command from the browser, if the user is in the group in the authority file, delete the user from the group;

(5) Add group to warehouse: After the agent receives the operation command of adding group to warehouse from the browser, if the warehouse exists, the group exists and the group does not have management authority to the warehouse, add a record;

(6) Remove the group from the warehouse: After the agent receives the command to remove the group from the warehouse from the browser, if the group in the permission file has management authority over the warehouse, delete the record;

(7) Modify the management authority of the group to the warehouse: after the agent receives the operation command from the browser to modify the management authority of the group to the warehouse, if the group in the authority file has management authority to the warehouse, modify the authority;

(8) Enumerate all group lists: after the agent receives the enumerate all group list operation commands from the browser, it enumerates all groups in the permission file and feeds back to the browser in the form of messages;

(9) list of users in the enumeration group: after the agent receives the user list operation command in the enumeration group from the browser, enumerates the users in the group in the authority file, and feeds back to the browser by the form of message;

(10) Obtain the authority of the group to the warehouse: After the agent receives the operation command of obtaining the authority of the group to the warehouse from the browser, if both the group and the warehouse exist, and the group has management authority to the warehouse, the authority information is extracted and passed through the packet form feedback to the browser;

(11) Enumerate warehouse group list: After the agent receives the enumerate warehouse group list operation command from the browser, if the warehouse exists, it will extract the group list authorized to manage the warehouse recorded in the permission file and feed it back to browser.

The specific method of user permission query is as follows:

Each warehouse in the CVS server has a read permission file and a write permission file. The agent program queries the user’s management permission for the warehouse: enumerates the read permission file and write permission file corresponding to the warehouse, and extracts the user permission for logic or processing. , and feed back the result to the browser in the form of a message.

All warehouses of the SVN server share the same authority file, which records all groups and users’ management authority to warehouses by warehouse. The agent program queries the user’s management authority to warehouses:

(1) Extract the group and user permission list corresponding to the warehouse in the permission file;

(2) extract the user of all group management in the step (1), filter and include the group list of user;

(3) Extract the permissions of all groups in (2) from (1), and do logical OR processing;

(4) Extract user rights from (1), and do logical OR processing with (3);

(5) Feedback the result in (4) to the browser in the form of a message.

The agent interacts with the CVS server and the API command line interface provided by the SVN server. The agent program can respond to and execute the instructions of the web server, automatic backup server, and automatic build server. The agent program communicates with the web server, the automatic backup server, and the automatic construction server. The transport layer adopts the TCP protocol, and the application layer is a custom protocol.

The first byte in the request message of the custom protocol is the command number, followed by the parameters. The parameters are expressed in ascii codes. Multiple parameters are separated by \n\r, that is, carriage return and line feed. The ascii code is 1310. Finally, it ends with \0, which is the 0 of the ascii code. The format of the response message is the same as that of the request message. The first byte is the command number, followed by the ascii-encoded return information, and finally ends with \0.

Example 1: Create a new warehouse named Testrepos, request message:

1 Testrepos\0

1 in the message is the command number, which means adding a warehouse.

After the web server encapsulates the command message, it connects to the agent program. After the agent program receives the message, it adds a Testrepos warehouse, and then responds according to the result. The success is 201, and the failure is 401.

1 201\0

A response of 201 indicates success.

Example 2: Enumerate warehouses, request message:

3

3 in the message indicates the command to enumerate warehouses, and this command does not need parameters.

After receiving the message, the agent obtains the warehouse list and returns the warehouse list, as shown in the response message example below.

3 Repos1\n\rRepos2\n\rRepos3\n\r...Reposn\0

Each warehouse name is separated by \n\r.

Example 3: Add a user to the warehouse and request a message:

11 Reposname\n\rusername\0

Response message:

11 201\0

201 means success.

The agent program acts both as a client program and as a server program. As a client, bind port 10001, which is mainly used to initiate a registration request to the registration server until the registration is successful. As a service program, it listens to port 10000 and waits for connection requests from the web server, automatic backup server and automatic build server. After receiving their commands, they will perform corresponding processing according to the command functions, and actively close the connection after processing, indicating that the communication is complete. The web server, the automatic backup server and the automatic construction server act as clients, actively connect to the SVN or CVS server agent program, send command messages, wait for the response of the other party or close the connection.

When the configuration management server accesses the system for the first time, the agent program needs to send a registration request to the registration server, requesting to enter the system. In this embodiment, the registration request is submitted to the registration server through the 255 command. Its message format is as follows.

The registration server allows it to enter the system according to the authorization information, and stores the relevant information of the server, including its memory, disk, operating system and other information, into the database server for filing. With this record, the system administrator can register administrators for the server. Afterwards, the agent regularly sends a heartbeat message to the registration server to prove that it is online and operable. If the registration server does not receive a heartbeat message within 120 seconds, it will consider the server offline and write the offline identifier into the database. When the web server sends a command to the configuration management server, it will prompt the user that the server is offline and cannot be operated. .

The working principle diagram of the automatic backup server is shown in Figure 2. According to the user's backup policy configuration, it periodically sends incremental backup or full backup commands to the configuration management server data of each unit, such as the SVN server. The full backup or incremental backup command message it sends to the agent is as follows:

Send backup command without response

55 ALL or INC\n\rService port\0

ALL in the message means full backup, INC means incremental backup, and the service port is the service port for listening to the backup completion notification.

After the SVN server receives its backup command, it starts the backup work. Its communication flowchart is shown in Fig. 3 . After the SVN server finishes backing up the data, it will notify the automatic backup server, and the automatic backup server will respond to the message. The backup completion notification and response message are as follows:

Send backup completion notification

ALL or INC\n\rService port number\n\rSvn ID\n\rBackup file name\n\rMD5\0

Response backup complete

201\0

ALL in the message means that all backups are completed, INC means that incremental backups are completed, the service port number is the service port that monitors the command for requesting backup data, followed by the name of the backup file and its MD5 check code.

After the automatic backup server has an idle thread, it obtains data from the SVN server. The command message to obtain the backup file is as follows:

request backup data command

56 Backup file name\0

After the data transfer is complete, record the log for recovery.

The working principle diagram of the automatic build server is shown in Figure 4. According to the label or branch name entered by the user, the automatic construction server obtains data from the remote configuration management server and sends it to the virtual machine construction environment for construction. The virtual machine can choose VMWare mature products, pre-installed Windows system or Linux system, and Build the compilation environment. The construction progress is stored in the database, and the user can check it at any time. After the construction is completed, it can interact with the company's PLM system according to the requirements to complete the automatic storage.

The working principle of the web server is shown in the figure. The web server is developed using a typical three-tier model, including business service layer, data access layer, and communication layer. The web server provides services in the form of Ajax, and the web server uses Ajax to request access. This interactive mode can enhance user experience, refresh partial data, and not cause full-page data transmission. The web server sends command messages to the agent program, the automatic backup server, and the automatic construction server through the communication layer, so as to realize the remote control of the administrator. The communication messages all adopt the above-mentioned message format.

The user rights of the web server are divided into system administrators, department administrators, and warehouse administrators. The system administrator logs in to the system through the web server, and can see the configuration management server currently included in the system, as well as the list of registered department administrators and warehouse administrators. The system administrator can register department administrators and warehouse administrators for configuration management servers newly entering the system. Department administrators can remotely manage and authorize all warehouses and users of the department's configuration management server; warehouse administrators can only remotely manage and authorize authorized warehouses. Warehouse administrator is suitable for project managers who manage one or more warehouses and have no access rights to other warehouses.

The specific embodiments related to the present invention are given above, but the present invention is not limited to the described embodiments. Under the idea given by the present invention, the technical means in the above-mentioned embodiments are transformed, replaced, and modified in ways that are easy for those skilled in the art, and the functions played are basically the same as those of the corresponding technical means in the present invention. 1. The purpose of the invention realized is also basically the same, and the technical solution formed in this way is formed by fine-tuning the above-mentioned embodiments, and this technical solution still falls within the protection scope of the present invention.

Claims (5)

1. a kind of configuration management system, including web server, registration server, database server and configuration management clothes Business device；Described web server is used for providing operation interface, and registration server receives log-on message, and database server is used Data base in storage configuration management system, configuration management server includes Agent, for system is carried out with configuration pipe Reason；It is characterized in that, described Agent is additionally operable to web server is carried out with user right configuration and user right inquiry.

2. a kind of configuration management system according to claim 1 is it is characterised in that the user right of described web server It is divided into system manager, department manager and warehouse keeper；The authority of described system manager includes checking currently including The configuration management server list of system, and the department manager of registration and warehouse keeper's list, and enter this and be for new The configuration management server registration department manager of system and warehouse keeper；The authority of department manager includes this department is joined Put all warehouses of management server and user carries out long-range management, mandate and structure；The authority of warehouse keeper is to mandate Warehouse carries out remote management, mandate and structure.

3. a kind of configuration management system according to claim 1 is it is characterised in that described configuration management server at least wraps Include CVS server and the one of which of SVN server, Agent passes through the API that CVS server or SVN server are provided Interface is interacted with CVS server or SVN server.

4. a kind of configuration management system according to claim 1 it is characterised in that described configuration management system also include standby Part server, for backing up to configuration management server data.

5. a kind of configuration management system according to claim 1 is it is characterised in that described configuration management system is also included certainly Dynamic structure server, for the label according to user input or branch name, obtains corresponding automatically from configuration management server Code sending in constructing environment is built automatically.