JP2013045223A - Batch job execution system, job management server, job authentication information update method and update program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a batch job execution system or the like which can easily and reliably update authentication information to a job including authentication information which is not centrally managed.SOLUTION: In a batch job execution system 1, a job execution server 20 including a plurality of execution means preliminarily stores a plurality of pieces of authentication information which are used by each execution means and are mutually independent, and a job management server 10 comprises: storage means 12 which preliminarily stores job network definition 116 which defines content of a batch job; in-job authentication information extraction means 114 which generates a list of the authentication information registered in the job network definition and displays it on a job management terminal; update target determination means 113 which determines an update target of the authentication information in the job execution server according to an operation instruction which is transmitted from the job management terminal on the basis of the displayed list of the authentication information; and authentication information transmission means 112 which gives an instruction to update the authentication information of the update target.

Description

  The present invention relates to a batch job execution system, a job management server, a job authentication information update method, and an update program, and more particularly to a batch job execution system and the like that easily and reliably update authentication information.

  A batch job execution system is a job flow in which a plurality of batch jobs (hereinafter simply referred to as jobs) are defined in the form of a flow, and each job is connected to one or more connected via a network in a predetermined order. A computer network intended to be executed collectively by a computer device. Each job is described in a script language such as a UNIX (registered trademark) shell script or a Windows (registered trademark) batch script.

  For example, the processing based on this job flow can be used for such purposes as performing routine batch processing on the computer collectively at night or on holidays when there are few users of the computer. At that time, using a huge virtual computer composed of multiple physical computers using cloud computing and grid computing technology, each user has a local computer at hand. The processing can be performed more efficiently than the above, and the time, cost, power consumption, etc. required for the execution can be reduced. Furthermore, since data backup processing can be performed in a lump, recovery can be easily performed even when a failure or disaster occurs.

  Therefore, in recent years, there has been a movement to consolidate business systems on a data center (DC) having such a batch job execution system in order to efficiently operate business systems possessed by each company. As a result, there are cases where the number of computers related to the business system collected in the DC ranges from thousands to tens of thousands, and the device configuration is frequently changed in the business system. Furthermore, business systems of a plurality of businesses that are not related to each other are often integrated into one DC.

  The problem in that case is the protection of a large number of personal information and confidential information that each company has in the business system. In particular, when the business systems of a plurality of business operators are integrated into a single DC, there is absolutely no information leakage not only to the outside of the DC but also between mutual business operators using the same DC. Must not.

  Since a user name and password are usually used for authentication, the password needs to be changed periodically (for example, at a frequency such as once a week). In such a case, centralized management of authentication information by a directory service such as Active Directory (registered trademark) of Microsoft Corporation in the United States, users who have been authenticated on the network are permitted on the network. A single sign-on (SSO) technique that makes it possible to use all network resources and functions, or an authentication information synchronization technique that uses dedicated software is often used.

  Patent Document 1 describes a computer system in which, when a password is changed, the hardware corresponding to the changed password is specified and the changed password is distributed to each of the specified hardware. Has been. This system includes a repository (CMDB) that manages configuration information, discovery that collects configuration information in the repository, and a change synchronization system that identifies a password change destination based on the relevance of information in the repository.

  Discovery then detects the computer and the software running on that computer, and the communication port, stores it in the repository, and the stored software information determines the relationship between the server software and the corresponding client software, and the communication port. The client using the server is specified, and the authentication information of the specified client is updated.

  In addition, there are the following technical documents as related techniques. Among them, Patent Document 2 describes a computer system that stores a password change procedure, sequentially starts applications that need to be changed, and changes the password. Patent Document 3 describes an account management apparatus that collectively changes an administrator account of each device connected to a computer network.

  Patent Document 4 describes a computer system in which when a password is changed in a first system directly connected to a terminal, the password is similarly changed in the second system in synchronization therewith. Patent Document 5 describes an authentication response device in which a proxy server performs authentication of a plurality of servers for a connection from one client.

JP 2010-186432 A JP 2002-169777 A JP 2008-066562 A JP 05-189288 A JP-A-10-177552

  However, in a batch job execution system, a business system individually constructed by a computer having unique authentication information is often replaced with the batch job execution system as it is.

  For example, an OS (Operating System) of a specific computer, an application that runs on the OS and executes a job, a job execution agent that allocates job execution to each application and manages the execution status, and processes in each application In many cases, authentication information of a user name and a password is set separately for each of the databases that manage the data to be managed. In many cases, such authentication information is described in the definition of a batch job.

  Applying the directory service or SSO technology described above to such a system, and integrating and integrating authentication information, cost and time equivalent to the case of newly building the system. For this reason, many operators dislike such costs, and also dislike that the operating business system is stopped for a long time and that the operation becomes unstable (as a result of system replacement).

  As a result, the OS, the application, the job execution agent, and the database are often replaced with a batch job execution system that operates in an integrated manner on the same job execution server while having separate authentication information. Is the actual situation.

  Even in such a batch job execution system, it is naturally necessary to periodically change the password as described above with the authentication information held by the OS, the application, the job execution agent, and the database. However, since the authentication information is not centrally managed by a directory service, SSO, or the like, it is necessary to separately perform a password change operation for each of them. Since the work is complicated and manual, mistakes due to human errors are likely to occur.

  Although it is possible to replace authentication information unique to each computer and authentication information included in the definition of a batch job using software / hardware dedicated to authentication information synchronization, the configuration of the business system is changed. It is necessary to manually register the host name and program name of the synchronization target system each time. The work is also complicated and mistakes are likely to occur.

  The technology described in Patent Document 1 uses computer information registered in the repository, so if the registration information of the repository is not sufficient, it is not possible to cover all servers that require password changes without omission. become.

  The remaining Patent Documents 2 to 5 do not describe a configuration that can solve the above problems. In other words, when the configuration of a business system is changed, it is possible to identify servers and applications that need to be changed, thereby easily replacing the authentication information unique to each computer or the authentication information included in the batch job definition. The configuration that enables this is not described in any of Patent Documents 1 to 5. The same applies even if all of the above conventional techniques are combined.

  An object of the present invention is to provide a batch job execution system, a job management server, and job authentication information that can easily and reliably update authentication information even for a job including authentication information that is not centrally managed. It is to provide an update method and an update program.

  In order to achieve the above object, a batch job execution system according to the present invention includes a job execution server having a plurality of execution means for executing a batch job, a job management server that instructs the job execution server to execute the batch job, and a job A batch job execution system configured by interconnecting a job management terminal operated by a user who requests a management server to execute a batch job, wherein the job execution server executes each execution means when executing the batch job. Are stored in advance, and the job management server is registered in advance in the job network definition and storage means for storing the job network definition that defines the contents of the batch job in advance. In-job authentication information extraction means for creating a list of authentication information and displaying it on the job management terminal; Based on the displayed list of authentication information, an update target determining means for determining an update target of the authentication information in the job execution server according to an operation command transmitted from the job management terminal, and determining that the update target is in the job execution server And authentication information transmitting means for instructing the job execution server to update the authentication information.

  In order to achieve the above object, a job management server according to the present invention has a plurality of execution means for executing batch jobs and stores in advance authentication information used by each execution means in advance, And a job management server that is mutually connected to a job management terminal operated by a user who requests the job management server to execute a batch job and instructs the job execution server to execute the batch job. A storage unit that pre-stores a job network definition to be defined; an in-job authentication information extraction unit that creates a list of authentication information registered in the job network definition and displays the list on the job management terminal; and Authentication information in the job execution server according to the operation command sent from the job management terminal based on the list And update target determination means for determining updated, characterized in that it comprises an authentication information transmission means for instructing to the job executing server to update the authentication information is determined to be updated in the job execution server.

  In order to achieve the above object, a job authentication information update method according to the present invention includes a plurality of execution means for executing a batch job and job execution in which authentication information used by each execution means is stored in advance. Server, job network definition that defines the contents of batch jobs, job management server that instructs the job execution server to execute batch jobs, and user operations that request job management servers to execute batch jobs The job management server creates a list of authentication information registered in advance in the job network definition by the in-job authentication information extraction means of the job management server. Sent to the job management terminal, the job management terminal displays a list of authentication information, and the displayed authentication information The job management terminal transmits an operation command based on the list to the job management server, and the authentication information update target determination unit of the job management server determines the authentication information update target in the job execution server according to the received operation command, and the job execution server The authentication information transmitting means of the job management server instructs the job execution server to update the authentication information determined to be the update target.

  In order to achieve the above object, a job authentication information update program according to the present invention includes a plurality of execution means for executing batch jobs and job execution in which authentication information used by each execution means is stored in advance. Server, job network definition that defines the contents of batch jobs, job management server that instructs the job execution server to execute batch jobs, and user operations that request job management servers to execute batch jobs The job management terminal is configured to create a list of authentication information registered in advance in the job network definition on a computer included in the job management server in a batch job execution system configured to be connected to each other. Based on the list of authentication information displayed on the job management terminal A procedure for receiving a command, a procedure for determining an update target of authentication information in the job execution server in accordance with the received operation command, and the job execution server to update the authentication information determined to be an update target in the job execution server It is characterized in that a procedure for instructing is executed.

  As described above, the present invention is configured to extract the authentication information directly from the batch job in the job network definition and update the authentication information selected by the user, so that the latest configuration of the batch job execution system The authentication information can be reliably updated based on the above. As a result, a batch job execution system, a job management server, and a job management server having excellent features that authentication information can be easily and reliably updated even for jobs including authentication information that is not centrally managed. A job authentication information update method and an update program can be provided.

It is explanatory drawing which shows the structure of the batch job execution system which concerns on the 1st Embodiment of this invention. It is explanatory drawing shown about the more detailed structure of the job management server shown in FIG. It is explanatory drawing shown about the more detailed structure of the job execution server shown in FIG. FIG. 2 is an explanatory diagram showing a more detailed configuration of the job management terminal shown in FIG. 1. FIG. 3 is an explanatory diagram illustrating an example of storage contents of job execution server authentication information illustrated in FIG. 2. FIG. 3 is an explanatory diagram illustrating an example of contents of a job network definition illustrated in FIG. 2. 2 is a flowchart showing a flow of operations when updating authentication information of a job management server, a job execution server, and a job management terminal shown in FIG. 1. FIG. 8 is an explanatory diagram illustrating an example of a list screen displayed on the input / output unit of the job management terminal in step S <b> 202 of FIG. 7. FIG. 9 is an explanatory diagram illustrating an example of an update target list created and transmitted by the job management server in steps S <b> 204 to 205 in FIG. 7. It is explanatory drawing which shows the structure of the batch job execution system which concerns on the 2nd Embodiment of this invention. It is explanatory drawing shown about the more detailed structure of the job management server shown in FIG. It is explanatory drawing which shows an example of the data content of the update time information shown in FIG.

(First embodiment)
Hereinafter, the structure of the 1st Embodiment of this invention is demonstrated based on attached FIG.
First, the basic content of the present embodiment will be described, and then more specific content will be described.
A batch job execution system 1 according to the present embodiment includes a job execution server 20 having a plurality of execution means (information processing execution means) for executing a batch job, and a job management server 10 for instructing the job execution server to execute the batch job. And a job management terminal 30 that is operated by a user who requests the job management server to execute a batch job. The job execution server 20 previously stores mutually independent authentication information used by each execution unit when executing a batch job. The job management server 10 creates a list of authentication information registered in advance in the storage unit 12 storing the job network definition 116 that defines the contents of the batch job in advance, and displays it on the job management terminal. An in-job authentication information extracting unit 114, an update target determining unit 113 for determining an update target of authentication information in the job execution server in accordance with an operation command transmitted from the job management terminal based on the displayed list of authentication information, Authentication information transmitting means 112 for instructing the job execution server to update the authentication information determined to be updated in the job execution server.

  Each execution unit of the job execution server 20 is used when executing the batch job, an OS execution unit 120 that executes an operating system, a job execution agent 130 that executes a batch job in response to a command from the job management server, and so on. An application execution unit 150 that executes the application to be executed, and a database unit 140 that manages data used in each batch job. The OS execution unit 120, the job execution agent 130, the application execution unit 150, and the database unit 140 At least two of them store the authentication information in the storage means 12 provided separately in advance.

  The update target determination unit 113 of the job management server 10 has a function of updating the authentication information described in the job network definition 116 in accordance with a command from the job management terminal.

With the above-described configuration, the batch job execution system 1 according to the present embodiment can easily and reliably update authentication information for a job including authentication information that is not centrally managed. It will be a thing.
Hereinafter, this will be described in more detail.

  FIG. 1 is an explanatory diagram showing a configuration of a batch job execution system 1 according to the first embodiment of the present invention. The batch job execution system 1 includes a job management server 10 that manages execution of batch jobs, a job execution server 20 that executes batch jobs, and a job management terminal 30 that is operated by a user who requests execution of batch jobs. 40 are connected to each other via 40.

  The job management server 10, the job execution server 20, and the job management terminal 30 all have a basic configuration as a computer device. Further, the job management server 10, the job execution server 20, and the job management terminal 30 are not limited in the number of units, but usually one job management server 10 includes a plurality of job execution servers 20 and a large number of job management servers 10. 1 job management terminal 30 corresponds. Further, two or more of the job management server 10, the job execution server 20, and the job management terminal 30 may be configured as the same computer or may be configured by virtual computers.

  The job management server 10 transmits data to and from other apparatuses via a main processing control means (CPU: Central Processing Unit) 11 that is a main body that executes a computer program, a storage means 12 that stores data, and a network 40. And communication means 13 for performing. The main arithmetic control unit 11 functions as a job management manager 110 that manages batch jobs executed by the job execution server 20 by executing the job management manager software. In addition, the storage unit 12 stores job execution server authentication information 115 (described later) and a job network definition 116.

  As with the job management server 10, the job execution server 20 includes a main calculation control unit (CPU) 21, a storage unit 22, and a communication unit 23.

  The main arithmetic control means 21 manages the execution of batch jobs requested by the job management server 10 and the OS execution unit 120 that executes an OS (Operating System) that is basic software by executing each software. The job execution agent 130, the database unit 140 that manages data used in each job, and the application execution unit 150 that executes an actual job using the data function as execution units.

  The storage means 22 includes authentication information 129, 139, which are user names and passwords used by the OS (Operating System) 120, the job execution agent 130, the database unit 140, and the application execution unit 150 when executing jobs. 149 and 159 are stored.

  Similarly to the job management server 10 and the job execution server 20, the job management terminal 30 accepts operation inputs from the main arithmetic control means (CPU) 31, storage means 32, communication means 33, and user. At the same time, input / output means 34 for presenting the processing result to the user is provided. The main arithmetic control unit 31 functions as a job management client 160 that inputs and outputs information about jobs executed by the job management server 10 and the job execution server 20 by executing job management client software.

  FIG. 2 is an explanatory diagram showing a more detailed configuration of the job management server 10 shown in FIG. The job management manager 110 includes a user name update unit 111, an authentication information transmission unit 112, an update target determination unit 113, and an in-job authentication information extraction unit 114. Further, the storage unit 12 stores the job execution server authentication information 115 and the job network definition 116 as described above.

  FIG. 3 is an explanatory diagram showing a more detailed configuration of the job execution server 20 shown in FIG. The OS execution unit 120 includes an OS authentication information receiving unit 121 and an OS authentication information updating unit 122. The job execution agent 130 includes an authentication information receiving unit 131, an authentication information transmitting unit 132, and an authentication information updating unit 133. The database unit 140 includes an authentication information receiving unit 141 and an authentication information updating unit 142. The application execution unit 150 includes an authentication information receiving unit 151 and an authentication information updating unit 152.

  Further, as described above, the storage unit 22 stores the authentication information 129, 139, 149, and 159 used by the OS (Operating System) operation unit 120, the job execution agent 130, the database unit 140, and the application execution unit 150, respectively. I remember it.

  FIG. 4 is an explanatory diagram showing a more detailed configuration of the job management terminal 30 shown in FIG. The job management client 160 includes an authentication information registration input unit 161, an authentication information update input unit 162, a job authentication information display unit 163, and a job execution user name selection unit 164.

(Function and operation of each means)
Hereinafter, the function and operation of each unit shown in FIGS.

  In the job management server 10 shown in FIG. 2, the authentication information transmitting unit 112 registers authentication information with the authentication information receiving unit 131 of the designated job execution server 20 based on an instruction from the update target determining unit 113. Instruct to update or delete.

  The user name update unit 111 includes a user name registered from the authentication information registration input unit 161 based on an instruction from the job execution user name selection unit 164 or a user name registered in the authentication information 129 and a job execution server that executes the job. 20 is registered in the job execution server authentication information 115. At that time, the user name update unit 111 acquires the user name registered in the authentication information 129 via the authentication information transmission unit 112.

  The job execution server authentication information 115 includes a user name in the job management server 10, a location of the job execution server 20 corresponding to the user name (host name of the job execution server), and a user name for executing a job in the job execution server 20. Included (more details later). A user name for executing a job on the job execution server 20 is transmitted to the corresponding job execution server 20 and registered in the authentication information 129 and 139.

  The update target determination unit 113 instructs the authentication information transmission unit 112 to register the user name and password specified by the authentication information registration input unit 161. The update target determining unit 113 also instructs the authentication information transmitting unit 112 to update or delete the user name and password for job execution instructed by the authentication information update input unit 162, and updates the job execution server authentication information 115. The update target determination unit 113 further instructs the authentication information transmission unit 112 to update the authentication information in the job instructed by the authentication information update input unit 162, and updates the authentication information in the job of the job network definition 116.

  The in-job authentication information extraction unit 114 extracts authentication information used in the job from the job execution server authentication information 115 and the job network definition 116 and sends the extracted information to the job management terminal 30. In the job management terminal 30, the job authentication information display unit 163 displays this information via the input / output unit 34. The contents of the job execution server authentication information 115 and the job network definition 116 will be described later.

  In the job execution server 20 shown in FIG. 3, the job execution agent 130 executes the job defined in the job network definition 116 requested to be executed by the job management server 10. In the job execution agent 130, the authentication information receiving unit 131 receives a request for registration, update, and deletion of authentication information from the authentication information transmitting unit 112 and instructs the authentication information transmitting unit 132 to update.

  The authentication information transmitting unit 132 instructs the OS authentication information receiving unit 121, the authentication information updating unit 133, the authentication information receiving unit 141, and the authentication information receiving unit 151 to register, update, and delete authentication information according to the authentication information to be updated.

  In accordance with the request received by the authentication information transmission unit 132, the authentication information update unit 133 registers the authentication information of the authentication information 139, and updates and deletes the registered authentication information. The authentication information 139 is authentication information including the user name and password of the OS execution unit 120 used when the job execution agent 130 executes a job.

  The OS execution unit 120 is a function for executing an operating system (OS) operating on the main arithmetic control unit 21 of the job execution server 20. Under the management of the OS execution unit 120, the job management agent 130, the database unit 140 and the application execution unit 150 operate.

  The OS authentication information receiving unit 121 accepts requests for registration of authentication information to the OS execution unit 120, updating of registered authentication information, and deletion. The OS authentication information updating unit 122 performs registration of the authentication information of the authentication information 129, update of the registered authentication information, and deletion according to the request received by the OS authentication information receiving unit 121.

  The authentication information 129 is authentication information including a user name and a password used in the OS execution unit 120. When the job execution agent 130 executes a job, it executes with the user name registered in the authentication information 129.

  The authentication information receiving means 141 of the database unit 140 accepts requests for registration of authentication information in the database unit 140, updating of registered authentication information, and deletion. The authentication information updating unit 142 registers the authentication information of the authentication information 149, updates the registered authentication information, and deletes it in accordance with the request received by the authentication information receiving unit 141. The authentication information 149 is authentication information including a user name and password used in the database unit 140.

  The authentication information receiving unit 151 of the application execution unit 150 accepts requests for registration of authentication information to the application execution unit 150, updating of registered authentication information, and deletion. The authentication registration update unit 132 registers authentication information of the authentication information 159, updates and deletes registered authentication information in accordance with the request received by the authentication information receiving unit 151. The authentication information 159 is authentication information including a user name and password used in the application execution unit 150.

  The job management client 160 shown in FIG. 4 is software responsible for input / output of information with the user of the job management manager 110. The input / output of this information may be a GUI (Graphic User Interface) or a CUI (Character-based User Interface, command line input / output method).

  The authentication information registration input unit 161 accepts input of a user name and password via the input / output unit 34 as authentication information to be registered in the authentication information 139 and 129, and registers the input information in the update target determination unit 113. Instruct them to do so. The authentication information update input unit 162 inputs and outputs the update and deletion of the user name and password registered by the authentication information registration input unit 161 and the update of the authentication information extracted from the job network definition 116 by the job authentication information display unit 163. This is performed according to the operation command received through the means 34.

  The job authentication information display unit 163 displays the authentication information extracted from the job network definition 116 via the input / output unit 34. Here, the authentication information displayed on the input / output unit 34 is updated by the authentication information update input unit 162. The job execution user name selection unit 164 also associates the relationship between the user name registered in the authentication information registration input unit 161 via the user name update unit 111 and the job execution server 20 that executes the job via the input / output unit 34. The job management server 10 is registered in association with each operation command.

  FIG. 5 is an explanatory diagram showing an example of the contents stored in the job execution server authentication information 115 shown in FIG. The job execution server authentication information 115 includes a job management server user name 115a indicating a user name in the job management server 10 and a job execution server name 115b indicating a machine name of the job execution server 20 according to each job. It includes data items such as a job execution server user name 115c indicating a user name at the server, and a password 115d corresponding thereto.

  The job execution server user name 115c and password 115d are transmitted to the job execution server 20 represented by the job execution server name 115b, and become authentication information 129 and 139 for the OS execution unit 120 and the job execution agent 130, respectively.

  FIG. 6 is an explanatory diagram showing an example of the contents of the job network definition 116 shown in FIG. In FIG. 6, a job network definition 116 written in a shell script is shown as an example. Even when written in a script language other than this (such as a batch script), the processing can be performed in the same manner as the processing described in the present embodiment, except that some language is different.

  The job network definition 116 is a description of a job definition that is actually executed by the job execution server 20 in a known shell script or batch script. It also contains authentication information used in the job. This authentication information becomes authentication information 149 and 159 used in the database unit 140 and the application execution unit 150.

  The job network definition 116 has a structure in which a job network for executing one job is formed by a combination of a plurality of unit jobs. Each unit job serial number ID 116a and its type 116b (job network or unit job), Name 116c, a preceding part ID 116d indicating which job each unit job follows, and a script 116e which is a command actually input to the host.

  The OS execution unit 120, job execution agent 130, database unit 140, and application execution unit 150 described in the above drawings were originally operated on different computers. As a result of collecting the systems, the forms are shown in which each is collected in the same job execution server 20 with the authentication information. This is a simple and extreme example in order to explain the outline of the present invention.

  The in-job authentication information extraction unit 114 extracts the job execution server user name 115c and the password 115d from the job execution server authentication information 115. Further, the in-job authentication information extracting unit 114 extracts a part of the batch job in the job network definition 116 that sends the user name and password to a specific host and the host name (or IP address, etc.). The host type (database part or application) is also determined from the host name.

  In the example of the shell script shown in FIG. 6, the in-job authentication information extraction unit 114 is described as “sqlplus -s scott / tiger @ ora92” in the script 116e of the job network definition 116. Extract the part. In this example, the user name is “scott”, the password is “tiger”, the host name is “ora92”, and the host type is “database part”. Then, the portion in which the password is described in the job network definition 116 is replaced with the updated password and stored.

  FIG. 7 is a flowchart showing a flow of operations when updating authentication information of the job management server 10, the job execution server 20, and the job management terminal 30 shown in FIG. First, when a user (business system administrator) transmits an authentication information update operation start command from the job management terminal 30 to the job management server 10 (step S200), the job management server 10 uses the in-job authentication information extraction means. 114 extracts authentication information used in the job from the job execution server authentication information 115 and the job network definition 116, and sends the extracted information to the job management terminal 30 (step S201).

  In the job management terminal 30, the job authentication information display unit 163 receives the list of authentication information transmitted from the in-job authentication information extraction unit 114, and displays it as a list screen 180 via the input / output unit 34 ( Step S202). FIG. 8 is an explanatory diagram showing an example of the list screen 180 displayed on the input / output unit 34 of the job management terminal 30 in step S202 of FIG. The display format of the list screen 180 may be in any form as long as it presents a list of authentication information that can be updated at present to the user in an easily understandable manner.

  In the example shown in FIG. 8, a server type 180a, a server name 180b, a user name 180c of each extracted authentication information, and a selection button 180d that the user clicks when selecting the authentication information are shown. When the selection button 180d is pressed, a dialog 180e for inputting new and old passwords is displayed. On this list screen 180, a plurality of authentication information can be selected and input.

  Returning to FIG. 7, the user selects which authentication information is to be updated from the list screen 180, and inputs the change content, for example, the password before and after the change, via the input / output means 34. The authentication information update input unit 162 receives the input content, and transmits the received input content to the update target determination unit 113 (step S203).

  The update target determination unit 113 determines the update target from the update content received from the authentication information update input unit 162, creates the update target list 181 (step S204), and passes this to the authentication information transmission unit 112. . The authentication information transmitting unit 112 transmits this to the authentication information receiving unit 131 of the job execution agent 130 (step S205).

  Further, the user name update unit 111 updates the data of the job execution server authentication information 115 according to the contents of the update, and the update target determination unit 113 updates the authentication information that is the update target in the job network definition 116. (Step S211). The processing on the job management server 10 side ends here.

  FIG. 9 is an explanatory diagram illustrating an example of the update target list 181 created and transmitted by the job management server 10 in steps S204 to S205 in FIG. The data format of the update target list 181 is arbitrary, but data such as “host name”, “host type (application, database, etc.)”, “user name”, “old password”, “new password”, etc. In short, the update target list 181 may be in any data format as long as the information necessary for logging in to the host to be updated and updating the authentication information is included.

  Returning to FIG. 7, in the job execution server 20, the authentication information receiving unit 131 of the job execution agent 130 receives this (step S 206), and the authentication information transmitting unit 132 first includes itself in the update target list 181. Is included (step S207), and if included, the authentication information updating unit 133 updates the authentication information 139 as requested (step S208). If the authentication information 139 is not included in the update target, the operation of step S208 is omitted and the process proceeds to step S209.

  Subsequently, the authentication information transmitting unit 132 transmits the update content to each of the OS execution unit 120, the database unit 140, and the application execution unit 150 in accordance with the content included in the update target list 181 (step S209). This is performed for all the update targets listed in the update target list 181 (step S210).

  A more detailed example of the above operation will be described. From the list screen 180 extracted in step S201 and displayed on the job management terminal 30 in step S202, the user selects the authentication information 129 of the OS execution unit 120 and the authentication information 139 of the job execution agent 130 as update targets. Think about the case.

  The authentication information update input unit 162 transmits the selected content to the update target determination unit 113 (step S203), and the update target determination unit 113 determines the update target and creates the update target list 181 (step S204). ). The authentication information transmitting unit 112 transmits the update target list 181 to the authentication information receiving unit 131 (step S205), and the authentication information receiving unit 131 receives this (step S206). Then, the user name update unit 111 updates the data of the job execution server authentication information 115 (step S211).

  Since the authentication information transmission unit 132 includes the authentication information 139 of its own in the received update target list 181 (step S207), the authentication information update unit 133 first updates the authentication information 139 (step S207). S208).

  Since the remaining update object is the authentication information 129 of the OS execution unit 120, the authentication information transmitting unit 132 updates the authentication information 129 via the OS authentication information receiving unit 121 and the OS authentication information updating unit 122 (steps S209 to S209). 210). This completes the update of authentication information for all update targets.

  Next, consider a case where the authentication information 149 of the database unit 140 and the authentication information 159 of the application execution unit 150 are selected by the user as update targets. The operation up to step S206 is the same as described above. Thereafter, the update target determination unit 113 updates the authentication information included in the job network definition 116 (step S211). In step S207, the authentication information transmission unit 132 omits the operation of step S208 and advances the operation to step S209 because the update target list 181 does not include its own authentication information 139.

  Subsequently, the authentication information transmitting unit 132 updates the authentication information 149 of the database unit 140 via the authentication information receiving unit 141 and the authentication information updating unit 142 according to the contents included in the update target list 181 (step S209). ). In this state, the authentication information 159 of the application execution unit 150 still remains to be updated (step S210 → No), and this time, the authentication information reception unit 151 and the authentication information update unit 152 are used to update the application execution unit 150. The authentication information 159 is updated (steps S209 to 210, second time). This completes the update of authentication information for all update targets.

(Overall operation of the first embodiment)
Next, the overall operation of the above embodiment will be described.
The job authentication information update method according to the present embodiment includes a job execution server 20 that includes a plurality of execution units that execute batch jobs and stores mutually independent authentication information used by each execution unit, and a batch job A job management server 10 that pre-stores a job network definition 116 that defines the contents of the job and instructs the job execution server to execute a batch job, and a job management that is operated by a user who requests the job management server to execute a batch job In the batch job execution system 1 configured to be connected to the terminal 30, the job management server's authentication information extraction means in the job creates a list of authentication information registered in advance in the job network definition, and the job The job management terminal sends a list of authentication information to the management terminal (step S201 in FIG. 7). The job management terminal sends an operation command based on the displayed list of authentication information to the job management server (FIG. 7, step S203), and authentication in the job execution server is performed according to the received operation command. The authentication information update target determining means of the job management server determines the information update target (step S204 in FIG. 7), and the authentication of the job management server is updated so as to update the authentication information determined to be the update target in the job execution server. The information transmission means instructs the job execution server (step S205 in FIG. 7).

Here, each of the above-described operation steps may be programmed to be executable by a computer, and may be executed by the job management server 10 that directly executes each of the steps. The program may be recorded on a non-temporary recording medium, such as a DVD, a CD, or a flash memory. In this case, the program is read from the recording medium by a computer and executed.
By this operation, this embodiment has the following effects.

  According to the present embodiment, it is possible to extract authentication information that can be changed directly from the job execution server authentication information 115 and the job network definition 116, create a list, and change the authentication information selected by the user from the list. it can. Therefore, even for a batch job execution system in which unique authentication information is included in the job execution server authentication information 115 or the job network definition 116 and it is difficult to integrate the authentication information by a directory service or SSO, a password or the like The authentication information can be easily changed. At that time, new installation and setting of special hardware and software are not particularly required.

  Even if the configuration of the batch job execution system is changed, as long as the job registered in the job execution server authentication information 115 and the job network definition 116 can be normally executed, the latest information is included. Since the system configuration is definitely reflected, there is no mistake in the host name, user name, and password written there. In the present invention, the information is directly extracted from the job execution server authentication information 115 and the job network definition 116 that can be normally executed. Therefore, the authentication information that needs to be changed can be extracted without omission and changed reliably.

  At that time, the processing of the update target judging unit 113 that extracts and replaces authentication information from the job network definition 116 and the in-job authentication information extracting unit 114 are processes that extract and replace a specific character string from a script that is character data. If you can. That is, high-level processing is not particularly required in programming, and can be performed by a normal character string extraction / replacement processing technique.

(Second Embodiment)
In the second embodiment of the present invention, the job management server 310 includes update time management means 417 for storing the date and time when the previous authentication information was updated in the storage means as update time information 418, and the update target of the job management server The determination unit 413 is configured to have a function of creating a list of authentication information in the order of a long period from the date and time stored in the update time information.

By adopting this configuration, in addition to obtaining the same effects as those of the first embodiment described above, it is possible to perform the update within the necessary time without missing the authentication information that needs to be further updated. The effect that it becomes possible can be obtained.
Hereinafter, this will be described in more detail.

  FIG. 10 is an explanatory diagram showing the configuration of the batch job execution system 301 according to the second embodiment of the present invention. The batch job execution system 301 has the same configuration as the batch job execution system 1 according to the first embodiment described above, except that the job management server 10 is replaced with another job management server 310.

  FIG. 11 is an explanatory diagram showing a more detailed configuration of the job management server 310 shown in FIG. The job management server 310 has the same hardware configuration as the job management server 10 according to the first embodiment described above. The software has the same configuration except that the job management manager 110 is replaced with another job management manager 410 and update time information 418 is added as information stored in the storage unit 12.

  In the job management manager 410, in addition to each unit described in the first embodiment, an update time management unit 417 is newly added, and the update target determination unit 113 is replaced with another update target determination unit 413. . Since the points other than those described above are the same as those in the first embodiment, the same reference numerals and names are used.

  FIG. 12 is an explanatory diagram showing an example of the data contents of the update time information 418 shown in FIG. For each account 418a (including server type, server name, and user name) extracted to be displayed on the job management terminal 30 as the list screen 180, the update time management unit 417 changes the password last in the account. The previous update date and time 418b, which is the date and time when the operation is performed, is stored as the update time information 418. The update target determination unit 413 displays the list screen 180 on the job authentication information display unit 163 in the order of the last update date and time 418b.

  As a result, the user (administrator of the batch job execution system) can perform the update within the required time without missing the authentication information that needs to be updated. In addition, if necessary, the update time management unit 417 notifies the user of authentication information that has passed a predetermined period from the previous update date and time 418b using a unit such as e-mail or pager. You may make it provide.

  The present invention has been described with reference to the specific embodiments shown in the drawings. However, the present invention is not limited to the embodiments shown in the drawings, and any known hitherto provided that the effects of the present invention are achieved. Even if it is a structure, it is employable.

  Regarding the embodiment described above, the main points of the new technical contents are summarized as follows. In addition, although part or all of the said embodiment is summarized as follows as a novel technique, this invention is not necessarily limited to this.

(Supplementary Note 1) A job execution server having a plurality of execution means for executing a batch job, a job management server that instructs the job execution server to execute the batch job, and the execution of the batch job to the job management server A batch job execution system configured to be connected to a job management terminal operated by a user requesting
The job execution server is
Mutually independent authentication information used by the execution means when executing the batch job is stored in advance,
The job management server is
Storage means for preliminarily storing a job network definition that defines the contents of the batch job;
In-job authentication information extraction means for creating a list of authentication information registered in advance in the job network definition and displaying the list on the job management terminal;
Update target determining means for determining an update target of the authentication information in the job execution server according to an operation command transmitted from the job management terminal based on the displayed list of the authentication information;
A batch job execution system comprising: authentication information transmission means for instructing the job execution server to update the authentication information determined to be updated in the job execution server.

(Additional remark 2) Each said execution means of the said job execution server is:
An OS execution unit that executes an operating system, a job execution agent that executes the batch job in response to a command from the job management server, an application execution unit that executes an application used in executing the batch job, A database unit for managing data used in each batch job,
At least two or more of the OS execution unit, the job execution agent, the application execution unit, and the database unit each store the authentication information separately in a storage unit provided in advance. The batch job execution system according to appendix 1.

(Supplementary note 3) The update target judging means of the job management server has a function of updating the authentication information described in the job network definition in accordance with a command from the job management terminal. The batch job execution system according to 1.

(Additional remark 4) While the said job management server is provided with the update time management means which memorize | stores in the said memory | storage means as update time information the date and time when authentication information was updated last time,
The update target determination unit of the job management server has a function of creating a list of the authentication information in order of a long period from the date and time stored in the update time information. Batch job execution system.

(Supplementary Note 5) A job execution server that has a plurality of execution means for executing batch jobs and that stores mutually independent authentication information used by the execution means, and the batch job for the job management server A job management server that is interconnected with a job management terminal operated by a user requesting execution of the command and commands the job execution server to execute the batch job,
Storage means for preliminarily storing a job network definition that defines the contents of the batch job;
In-job authentication information extraction means for creating a list of authentication information registered in the job network definition and displaying the list on the job management terminal;
Update target determining means for determining an update target of the authentication information in the job execution server according to an operation command transmitted from the job management terminal based on the displayed list of the authentication information;
A job management server, comprising: an authentication information transmission unit that instructs the job execution server to update the authentication information that is determined to be updated in the job execution server.

(Supplementary Note 6) A job execution server having a plurality of execution means for executing batch jobs and pre-stores mutually independent authentication information used by each execution means, and a job network for defining the contents of the batch jobs A job management server that stores definitions in advance and instructs the job execution server to execute the batch job, and a job management terminal that is operated by a user who requests the job management server to execute the batch job mutually. In a batch job execution system that is connected and configured,
A list of authentication information registered in advance in the job network definition is created by the in-job authentication information extraction unit of the job management server and transmitted to the job management terminal,
The job management terminal displays a list of the authentication information,
The job management terminal transmits an operation command based on the displayed list of authentication information to the job management server,
According to the received operation command, the authentication information update target determining means of the job management server determines the authentication information update target in the job execution server,
A job authentication information updating method, wherein the authentication information transmitting means of the job management server instructs the job execution server to update the authentication information determined to be updated in the job execution server.

(Supplementary Note 7) A job execution server having a plurality of execution means for executing batch jobs and pre-stores mutually independent authentication information used by each execution means, and a job network for defining the contents of the batch jobs A job management server that stores definitions in advance and instructs the job execution server to execute the batch job, and a job management terminal that is operated by a user who requests the job management server to execute the batch job mutually. In a batch job execution system that is connected and configured,
In the computer provided in the job management server,
A procedure for creating a list of authentication information registered in advance in the job network definition and sending it to the job management terminal,
A procedure for receiving an operation command based on the list of authentication information displayed on the job management terminal;
A procedure for determining an update target of the authentication information in the job execution server according to the received operation command;
And a job authentication information update program for causing the job execution server to execute a procedure for updating the authentication information determined to be updated in the job execution server.

  The present invention can be applied to a batch job execution system. In particular, the present invention has a remarkable effect on a batch job execution system integrated on a DC using a large-scale cloud computing or grid computing technology.

DESCRIPTION OF SYMBOLS 1,301 Batch job execution system 10,310 Job management server 11, 21, 31 Main operation control means 12, 22, 32 Storage means 13, 23, 33 Communication means 20 Job execution server 30 Job management terminal 34 Input / output means 40 Network 110, 410 Job management manager 111 User name update unit 112 Authentication information transmission unit 113, 413 Update target determination unit 114 In-job authentication information extraction unit 115 Job execution server authentication information 116 Job network definition 120 OS execution unit 121 OS authentication information reception unit 122 OS authentication information updating unit 129, 139, 149, 159 Authentication information 130 Job execution agent 131, 141, 151 Authentication information receiving unit 132 Authentication information transmitting unit 133, 142, 152 Authentication information updating unit 140 Database Unit 150 Application Execution Unit 160 Job Management Client 161 Authentication Information Registration Input Unit 162 Authentication Information Update Input Unit 163 Job Authentication Information Display Unit 164 Job Execution User Name Selection Unit 180 List Screen 181 Update Target List 417 Update Time Management Unit 418 Update Timing information

Claims (7)

A job execution server having a plurality of execution means for executing batch jobs, a job management server that instructs the job execution server to execute the batch job, and a user who requests the job management server to execute the batch job Is a batch job execution system configured by connecting to the job management terminal operated by
The job execution server is
Mutually independent authentication information used by the execution means when executing the batch job is stored in advance,
The job management server is
Storage means for preliminarily storing a job network definition that defines the contents of the batch job;
In-job authentication information extraction means for creating a list of authentication information registered in advance in the job network definition and displaying the list on the job management terminal;
Update target determining means for determining an update target of the authentication information in the job execution server according to an operation command transmitted from the job management terminal based on the displayed list of the authentication information;
A batch job execution system comprising: authentication information transmission means for instructing the job execution server to update the authentication information determined to be updated in the job execution server. Each execution means of the job execution server,
An OS execution unit that executes an operating system, a job execution agent that executes the batch job in response to a command from the job management server, an application execution unit that executes an application used in executing the batch job, A database unit for managing data used in each batch job,
At least two or more of the OS execution unit, the job execution agent, the application execution unit, and the database unit each store the authentication information separately in a storage unit provided in advance. The batch job execution system according to claim 1.   The update target determination unit of the job management server has a function of updating the authentication information described in the job network definition in accordance with a command from the job management terminal. Batch job execution system. The job management server includes update time management means for storing the date and time when the authentication information was last updated in the storage means as update time information,
The update target determination unit of the job management server has a function of creating a list of the authentication information in order of a long period from the date and time stored in the update time information. Batch job execution system. A job execution server having a plurality of execution means for executing batch jobs and storing mutually independent authentication information used by each execution means, and requesting execution of the batch job to the job management server A job management server interconnected with a job management terminal operated by a user and instructing the job execution server to execute the batch job,
Storage means for preliminarily storing a job network definition that defines the contents of the batch job;
In-job authentication information extraction means for creating a list of authentication information registered in the job network definition and displaying the list on the job management terminal;
Update target determining means for determining an update target of the authentication information in the job execution server according to an operation command transmitted from the job management terminal based on the displayed list of the authentication information;
A job management server, comprising: an authentication information transmission unit that instructs the job execution server to update the authentication information that is determined to be updated in the job execution server. A job execution server that has a plurality of execution means for executing batch jobs and that stores mutually independent authentication information used by each of the execution means, and a job network definition that defines the contents of the batch job in advance And a job management server that instructs the job execution server to execute the batch job and a job management terminal that is operated by a user who requests the job management server to execute the batch job. Batch job execution system,
A list of authentication information registered in advance in the job network definition is created by the in-job authentication information extraction unit of the job management server and transmitted to the job management terminal,
The job management terminal displays a list of the authentication information,
The job management terminal transmits an operation command based on the displayed list of authentication information to the job management server,
According to the received operation command, the authentication information update target determining means of the job management server determines the authentication information update target in the job execution server,
A job authentication information updating method, wherein the authentication information transmitting means of the job management server instructs the job execution server to update the authentication information determined to be updated in the job execution server. A job execution server that has a plurality of execution means for executing batch jobs and that stores mutually independent authentication information used by each of the execution means, and a job network definition that defines the contents of the batch job in advance And a job management server that instructs the job execution server to execute the batch job and a job management terminal that is operated by a user who requests the job management server to execute the batch job. Batch job execution system,
In the computer provided in the job management server,
A procedure for creating a list of authentication information registered in advance in the job network definition and sending it to the job management terminal,
A procedure for receiving an operation command based on the list of authentication information displayed on the job management terminal;
A procedure for determining an update target of the authentication information in the job execution server according to the received operation command;
And a job authentication information update program for causing the job execution server to execute a procedure for updating the authentication information determined to be updated in the job execution server.

Images