CN106452907B - A configuration management system - Google Patents

Abstract

The invention relates to a configuration management system, including a web server, a registration server, a database server and a configuration management server; the web server is used to provide an operation interface, the registration server receives registration information, and the database server is used for storing the configuration management system. The configuration management server includes an agent program, which is used for configuration management of the system; the agent program is also used for user rights configuration and user rights query to the web server. In a configuration management system provided by the present invention, an agent program with configuration user authority and user authority query is set on the configuration management server, and the user can query his own authority from the web server through the agent program, thereby solving the problem that the user cannot check his own authority. Permission to query.

Description

A configuration management system

technical field

The invention relates to the application field of computer information technology, in particular to a configuration management system.

Background technique

At present, each R&D unit of large and medium-sized companies has its own independent configuration management server, including CVS, SVN and other configuration management servers. They are decentralized and managed independently, and the level of configuration management is different. There are loose control of authority and confusion of version management. , no backup, etc.; the configuration management operation is cumbersome, or the configuration management is performed through the original command line, or the configuration file is modified to achieve the management purpose. There is no visual image interface for operation, which is inefficient and requires high-quality administrators. This status quo creates unfavorable conditions for the company's standardized, safe and intensive management. In terms of automatic construction, the level of each company is not uniform, and a unified platform is needed to comprehensively improve the level of automatic construction and improve the level of software production.

The current configuration management systems, such as the SVN server and the CVS server, do not have a user's permission query function, so the user cannot query their own permissions and cannot meet the actual needs of the user.

SUMMARY OF THE INVENTION

The present invention provides a configuration management system for solving the above-mentioned problem that users cannot query their own authority.

A configuration management system includes a web server, a registration server, a database server and a configuration management server; the web server is used to provide an operation interface, the registration server receives registration information, and the database server is used to store the database in the configuration management system, The configuration management server includes an agent program, which is used for configuration management of the system; the agent program is also used for user rights configuration and user rights query on the web server.

In a configuration management system provided by the present invention, an agent program with configuration user authority and user authority query is set on the configuration management server, and the user can query his own authority from the web server through the agent program, thereby solving the problem that the user cannot check his own authority. Permission to query.

Further, the user authority of the web server is divided into a system administrator, a department administrator and a warehouse administrator; the authority of the system administrator includes viewing the list of configuration management servers currently incorporated into the system, and the registered department administrator and warehouse. List of administrators, and register department administrators and warehouse administrators for the new configuration management server entering the system; the authority of department administrators includes remote management, authorization and construction of all warehouses and users of the configuration management server of the department; warehouses Admin rights to remotely manage, authorize and build authorized repositories. Setting up multiple layers of user permissions for the web server can prevent users from unauthorized operations.

Further, the configuration management server includes at least one of a CVS server and an SVN server, and the agent program interacts with the CVS server or the SVN server through an API interface provided by the CVS server or the SVN server.

Further, the configuration management system further includes a backup server for backing up data of the configuration management server. Setting up a backup server can prevent data loss and ensure system security.

Further, the configuration management system further includes an automatic build server, configured to automatically obtain the corresponding code from the configuration management server according to the label or branch name input by the user and send it to the build environment for automatic build. By automatically constructing the server, the difficulty of using the system can be reduced, and the quality requirements for administrators can be reduced.

Description of drawings

Fig. 1 is a configuration management system diagram provided by an embodiment;

Fig. 2 is the working principle diagram of automatic backup server;

Fig. 3 is the communication interaction diagram of automatic backup server;

Fig. 4 is the working principle diagram of automatic construction server;

Figure 5 is a working principle diagram of the Web server.

Detailed ways

The present invention provides a configuration management system for solving the above-mentioned problem that users cannot query their own authority.

A configuration management system includes a web server, a registration server, a database server and a configuration management server; the web server is used to provide an operation interface, the registration server receives registration information, and the database server is used to store the database in the configuration management system, The configuration management server includes an agent program, which is used for configuration management of the system; the agent program is also used for user rights configuration and user rights query on the web server.

In a configuration management system provided by the present invention, an agent program with configuration user authority and user authority query is set on the configuration management server, and the user can query his own authority from the web server through the agent program, thereby solving the problem that the user cannot check his own authority. Permission to query.

The present invention will be described in detail below with reference to the accompanying drawings.

A configuration management system provided by this embodiment has a system structure as shown in Figure 1, including a web server, a database server, a registration server, an automatic backup server, an automatic construction server and a configuration management server, wherein the configuration management server includes CVS server and SVN server.

There are agent programs on the configuration management server. According to the type of the configuration management server, there are CVS agents and SVN agents. The agent program supports operations on warehouses, users, and groups in the CVS and SVN servers. Each operation has a unique command number. The user sends commands to the agent through the browser, and the agent parses the received commands and completes the corresponding operations. The operations supported by the agent include warehouse operations, user operations, and permission operations. The SVN agent program also supports group operations. Permission operations include read-only, write-only, and read-write. When the agent is installed, it is necessary to set the path of the warehouse in the CVS or SVN server, the user file, the permission file; and the installation path of the CVS and SVN services, because the parsing of some commands needs to pass the commands provided by the CVS and SVN services. Line processing, such as warehouse creation, deletion, etc.

The warehouse operations of the agent include: adding warehouses, deleting warehouses, and enumerating warehouses.

(1) Add warehouse: After the agent receives the add warehouse operation command from the browser, it queries whether the warehouse to be added exists under the warehouse path. If it does not exist, call the CVS or SVN program (command line) to execute the add warehouse operation;

(2) Delete warehouse: After the agent receives the delete warehouse operation command from the browser, it queries whether the warehouse to be deleted exists under the warehouse path. If it exists, call the CVS or SVN program (command line) to execute the delete warehouse operation;

(3) Enumeration warehouse: After the agent receives the enumeration warehouse operation command from the browser, it traverses all warehouses under the warehouse path, and feeds back to the browser in the form of messages;

The user operations of the agent include: adding users, deleting users, adding users to the warehouse, removing users from the warehouse, enumerating users, enumerating warehouse users, and user-managed warehouses.

(1) Add user: After the agent receives the add user operation command from the browser, it queries whether the user exists in the user file (svn is the htpasswd file, cvs is a user file passwd corresponding to each warehouse). add to the user file;

(2) Delete user: After the agent receives the delete user operation command from the browser, it queries whether the user exists in the user file, and if so, deletes the user from the user file;

(3) Add user to warehouse: After the agent receives the add user to warehouse operation command from the browser, it queries whether the warehouse and user exist. If it exists and there is no record in the permission file, the corresponding record is added in the permission file. (Permission file: svn is authz, cvs is two permission files for each warehouse, one read permission file and one write permission file);

(4) Remove the user from the warehouse: After the agent receives the operation command from the browser to remove the user from the warehouse, it queries whether there is a record in the authority file, and if so, deletes the corresponding record in the authority file;

(5) Enumerate users: After the agent receives the enumeration user operation command from the browser, it enumerates all users in the user file, and feeds it back to the browser in the form of messages;

(6) Enumerating warehouse users: After the agent receives the enumerating warehouse user operation command from the browser, it extracts the user list of the warehouse from the authority file, and feeds it back to the browser in the form of a message;

(7) User-managed warehouse: After the agent receives the user-managed warehouse operation command from the browser, it extracts the user-managed warehouse list from the authority file, and feeds it back to the browser in the form of a message;

The authority operations of the agent include: adding users to the warehouse, and modifying the operation authority of users to the warehouse.

(1) Add user to the warehouse: After the agent receives the add user to the warehouse operation command from the browser, it queries whether the warehouse and the user exist. If it exists and there is no record in the authority file, the corresponding record is added in the authority file;

(2) Modify the user's operation authority to the warehouse: After the agent receives the operation command from the browser to modify the user's operation authority to the warehouse, it queries whether the user has the operation authority to the warehouse in the authority file. If there is no record, modify it if so. authority;

The group operations of the SVN agent include: adding a group, removing a group, adding a user to a group, removing a user from a group, adding a group to a warehouse, removing a group from a warehouse, modifying the group's management rights to the warehouse, and enumerating the list of all groups , Enumerate the list of users in the group, get the permissions of the group to the warehouse, and enumerate the list of warehouse groups.

(1) Add group: After the agent receives the add group operation command from the browser, it queries whether the group exists in the permission file, and if it does not exist, adds the record;

(2) Remove group: After the agent receives the operation command to remove the group from the browser, it queries whether the group exists in the permission file, and if so, deletes the record;

(3) Add user to group: After the agent receives the add user to group operation command from the browser, if the group in the authority file exists, the user in the user file exists and the user is not in the group, a record is added in the authority file;

(4) Remove the user from the group: after the agent receives the remove user from the group operation command from the browser, if the user in the permission file is in the group, delete the user from the group;

(5) Add group to warehouse: After the agent receives the add group to warehouse operation command from the browser, if the warehouse exists, the group exists and the group does not have the management authority to the warehouse, the record is added;

(6) Remove the group from the warehouse: After the agent receives the operation command to remove the group from the warehouse from the browser, if the group in the authority file has the management authority to the warehouse, delete the record;

(7) The management authority of the modification group to the warehouse: After the agent receives the operation command of the management authority of the modification group to the warehouse from the browser, if the group in the authority file has the management authority to the warehouse, modify the authority;

(8) Enumerate all group lists: After the agent receives the enumerate all group list operation command from the browser, it enumerates all groups in the permission file, and feeds it back to the browser in the form of messages;

(9) User list in the enumeration group: After the agent receives the user list operation command in the enumeration group from the browser, it enumerates the users in the group in the authority file, and feeds it back to the browser in the form of a message;

(10) Obtaining the group's authority to the warehouse: After the agent receives the operation command from the browser to obtain the group's authority to the warehouse, if both the group and the warehouse exist, and the group has management authority to the warehouse, the agent will extract the authority information and pass the message's form feedback to the browser;

(11) Enumeration warehouse group list: After the agent receives the enumeration warehouse group list operation command from the browser, if the warehouse exists, it extracts the group list of authorized management warehouses recorded in the authority file and feeds it back to the message in the form of a message. browser.

The specific method of user permission query is as follows:

There is a read permission file and a write permission file under each warehouse in the CVS server. The method for the agent program to query the management permission of the user to the warehouse: enumerate the read permission file and write permission file corresponding to the warehouse, and extract the user permission for logical OR processing. , and the result is fed back to the browser in the form of a message.

All warehouses of the SVN server share the same authority file. In the authority file, all groups are recorded by warehouse, and the management authority of the warehouse is used. The method of the agent program to query the management authority of the user to the warehouse:

(1) Extract the group and user permission list corresponding to the warehouse in the permission file;

(2) extracting the users managed by all groups in step (1), and filtering the group list containing the users;

(3) Extract the permissions of all groups in (2) from (1) and do logical OR processing;

(4) extract user rights from (1), and (3) do logical OR processing;

(5) The result in (4) is fed back to the browser in the form of a message.

The agent program interacts with it through the API command line interface provided by the CVS server and the SVN server. The agent program can respond to and execute the instructions of the web server, the automatic backup server, and the automatic build server. The communication command between the agent program and the web server, the automatic backup server, and the automatic construction server, the transport layer adopts the TCP protocol, and the application layer is a custom protocol.

The first byte in the request message of the custom protocol is the command number, followed by the parameters. The parameters are represented by ascii codes. Multiple parameters are separated by \n\r, that is, carriage return and line feed. The ascii code is 1310. Finally, it ends with \0, which is the 0 of the ascii code. The format of the response message is the same as that of the request message. The first byte is the command number, followed by the ascii-encoded return information, and finally ends with \0.

Example 1: Create a new warehouse, the name is Testrepos, and the request message:

1 Testrepos\0

In the message, 1 is the command number, which means adding a warehouse.

After the Web server encapsulates the command message, it connects to the agent program. After the agent program receives the message, it adds a new Testrepos warehouse, and then responds according to the result. Success is 201, and failure is 401.

1 201\0

A response of 201 indicates success.

Example 2: Enumerate warehouse, request message:

3

3 in the message indicates the enumeration warehouse command, which requires no parameters.

After the agent receives the message, it obtains the warehouse list and returns the warehouse list, as shown in the following response message example.

3 Repos1\n\rRepos2\n\rRepos3\n\r...Reposn\0

Use \n\r space between each warehouse name.

Example 3: Add a user to the warehouse and request a message:

11 Reposname\n\rusername\0

Response message:

11 201\0

201 means success.

The agent program acts as both a client program and a server program. As a client, bind port 10001, which is mainly used to initiate a registration request to the registration server until the registration is successful. As a service program, it listens on port 10000 and waits for connection requests from the web server, automatic backup server and automatic build server. After receiving their commands, the corresponding processing is performed according to the command function, and the connection is actively closed after processing, indicating that the communication is completed. The web server, automatic backup server and automatic build server serve as clients, actively connect to the SVN or CVS server agent, send command packets, and wait for the other party's response or close the connection.

When the configuration management server accesses the system for the first time, the agent program needs to send a registration request to the registration server to request to enter the system. In this embodiment, the registration request is submitted to the registration server through the 255 command. Its message format is as follows.

The registration server allows it to enter the system according to the authorization information, and stores the relevant information of the server, including its memory, disk, operating system, etc., into the database server for the record. With this filing, a system administrator can register an administrator for that server. Afterwards, the agent program periodically sends heartbeat messages to the registration server to prove that it is operational online. If the registration server does not receive the heartbeat message within 120 seconds, the server is considered offline, and the offline identification is written into the database. When the web server sends a command to the configuration management server, the user will be prompted that the server is offline and cannot be operated. .

The working principle diagram of the automatic backup server is shown in Figure 2. It periodically sends incremental backup or all backup commands to the configuration management server data of each unit, such as the SVN server, according to the user's backup policy configuration. The full or incremental backup command message it sends to the agent is as follows:

Send backup command without response

55 ALL or INC\n\rService Port\0

In the message, ALL means all backups, INC means incremental backups, and the service port is the service port that monitors the backup completion notification.

After the SVN server receives its backup command, it starts the backup job. Its communication flow chart is shown in Figure 3. After the SVN server backs up the data, it notifies the automatic backup server, and the automatic backup server will respond to the message. The backup completion notification and response messages are as follows:

Send backup completion notification

ALL or INC\n\rService port number\n\rSvn ID\n\rBackup file name\n\rMD5\0

Response backup complete

201\0

In the message, ALL indicates that all backups are completed, INC indicates that incremental backups are completed, and the service port number is the service port that listens for the backup data command, followed by the name of the backup file and its MD5 check code.

After the automatic backup server has idle threads, it obtains data from the SVN server. The command message for obtaining the backup file is as follows:

request backup data command

56 Backup file name\0

After the data transfer is completed, a log is recorded for recovery.

The working principle of the automatic build server is shown in Figure 4. The automatic build server obtains data from the remote configuration management server according to the label or branch name entered by the user and sends it to the virtual machine build environment for construction. Build the compilation environment. The construction progress is stored in the database, and users can view it at any time. After the construction is completed, according to the requirements, it can interact with the company's PLM system to complete the automatic storage.

The working principle of the web server is shown in the figure. The web server is developed using a typical three-layer model, including business service layer, data access layer, and communication layer. The web server provides services in Ajax mode, and the web server requests access by Ajax. This interactive mode can enhance the user experience, refresh local data, and do not cause data transfer on the entire page. The web server sends command messages to the agent program, the automatic backup server, and the automatic construction server through the communication layer, so as to realize the remote control of the administrator. Communication messages are in the above message format.

The user rights of the web server are divided into system administrators, department administrators and warehouse administrators. The system administrator logs in to the system through the web server, and can see the configuration management server currently incorporated into the system, as well as the list of registered department administrators and warehouse administrators. System administrators can register department administrators and warehouse administrators for the configuration management server newly entered into the system. The department administrator can remotely manage and authorize all warehouses and users of the department's configuration management server; warehouse administrators can only remotely manage and authorize authorized warehouses. Warehouse administrators are suitable for project managers to manage one or more warehouses, but have no access rights to other warehouses.

The specific embodiments to which the present invention relates are given above, but the present invention is not limited to the described embodiments. Under the idea given by the present invention, the technical means in the above-mentioned embodiments are transformed, replaced and modified in a manner that is easy for those skilled in the art to imagine, and the functions played are basically the same as those of the corresponding technical means in the present invention. The purpose of the invention is basically the same. The technical solution formed in this way is formed by fine-tuning the above embodiment, and this technical solution still falls within the protection scope of the present invention.

Claims (2)

1. A configuration management system comprises a web server, a registration server, a database server and a configuration management server; the web server is used for providing an operation interface, the registration server receives registration information, the database server is used for storing a database in the configuration management system, and the configuration management server comprises an agent program used for performing configuration management on the system; the proxy program is also used for carrying out user authority configuration and user authority query on the web server;

the configuration management system also comprises a backup server for backing up the data of the configuration management server;

the configuration management system also comprises an automatic construction server, which is used for automatically acquiring corresponding codes from the configuration management server according to the labels or branch names input by the user and sending the codes into a construction environment for automatic construction;

the agent program is used as a client program and a server program; when the client is used as a client, a registration request is initiated to a registration server until the registration is successful; when the server is used as a service program, the server waits for connection requests of the web server, the automatic backup server and the automatic construction server, responds to and executes instructions of the web server, the automatic backup server and the automatic construction server, and actively closes the connection after the processing is finished;

the configuration management server at least comprises one of a CVS server and an SVN server, and the agent program interacts with the CVS server or the SVN server through an API (application programming interface) provided by the CVS server or the SVN server.

2. A configuration management system according to claim 1, wherein the user authority of the web server is divided into a system administrator, a department administrator and a warehouse administrator; the system administrator's authority includes viewing a list of configuration management servers currently brought into the system, and a list of registered department administrators and warehouse administrators, and registering department administrators and warehouse administrators for a configuration management server newly entering the system; the authority of a department administrator comprises remote management, authorization and construction of all warehouses and users of a configuration management server of the department; the authority of the warehouse administrator remotely manages, authorizes and constructs the authorized warehouse.

Images