WO2011070676A1

WO2011070676A1 - Information processor, control method for information processor, control program for information processor, and control program for system controller

Info

Publication number: WO2011070676A1
Application number: PCT/JP2009/070761
Authority: WO
Inventors: 浩二成廣
Original assignee: 富士通株式会社
Priority date: 2009-12-11
Filing date: 2009-12-11
Publication date: 2011-06-16

Abstract

One first processor of a plurality of first processors is provided with a first storage section for storing first user information indicating a first user having access authority to the one first processor, a first determination section for determining whether or not to permit access to the one first processor by a second user when second user information indicating the second user is input, a detection section for detecting a change in the first user information within the first storage section, and a first transmission section for transmitting change information indicating the content of the change in the first user information to a second processor, and the second processor is provided with a second storage section for storing third user information indicating a third user having access authority to the second processor, a second determination section for determining whether or not to permit access to the second processor by a fourth user when fourth user information indicating the fourth user is input, a first reception section for receiving the change information transmitted from the first transmission section, and a first updating section for updating the third user information within the second storage section.

Description

Information processing apparatus, information processing apparatus control method, information processing apparatus control program, and system control apparatus control program

The technology disclosed in this specification relates to an information processing apparatus, a control method for the information processing apparatus, a control program for the information processing apparatus, and a control program for the system control apparatus.

Hardware resources including computing resources such as a CPU (Central Processing Unit) as an arithmetic processing unit possessed by a server as an information processing device or a system board (System Board) as a processing device are logically divided into a plurality of partitions. A partitioning technique for constructing an independent OS (Operating System) environment in each partition is known. As described above, the server divided into a plurality of partitions has a system control device such as a service processor (SVP) that monitors and controls hardware resources. Each partition is provided with a monitoring agent that assists the function of the system control device. The monitoring agent acquires the usage status of hardware resources by the partition in which the monitoring agent is installed, and notifies the usage status to the system control device via a control line connected to the system control device. Based on this usage status, the system control device monitors and controls hardware resources. Moreover, the partition and the system control apparatus have independent user authentication functions, and manage users based on independent user information. In addition, the user needs to log into the system control device and the OS on the partition separately.

JP 2004-342039 A JP 2005-149341 A

However, the above-described technique has a problem that the workload of an administrator who manages user information in the server increases according to the number of partitions on the server and the number of users. For example, when a user is added or deleted, the administrator must change user information in the partition and the system control device.

The present invention has been made to solve the above-described problems, and is an information processing apparatus that can easily change user information, a control method for the information processing apparatus, a control program for the information processing apparatus, and a control for the system control apparatus. The purpose is to provide a program.

An information processing device includes a plurality of first processing devices each having an arithmetic processing device, and a second processing device that controls the arithmetic processing devices included in each of the plurality of first processing devices. The first processing device of any one of the plurality of first processing devices includes first user information indicating a first user who has an access right to the first processing device. When the first storage unit to be stored and the second user information indicating the second user are input, based on the second user information and the first user information, by the second user A first determination unit that determines whether or not to permit access to the one first processing device; a detection unit that detects a change in the first user information in the first storage unit; The first user information is changed by the detection unit A first transmission unit that transmits change information indicating a change content of the first user information to the second processing device when the second processing device is issued, and the second processing device includes the second processing. When a second storage unit that stores third user information indicating a third user who has authority to access the device and fourth user information indicating a fourth user are input, the fourth user A second determination unit that determines whether to permit access to the second processing device by the fourth user based on the information and the third user information; and the first transmission unit A first receiving unit that receives the change information transmitted from the first update unit, and updates the third user information in the second storage unit based on the change information received by the first receiving unit. A first updating unit.

The control program for the information processing device is a control program for the information processing device that controls the information processing device having the arithmetic processing device, and when the first user information indicating the first user is input, the first program The information processing apparatus by the first user based on the user information and the second user information indicating the second user who has the authority to access the information processing apparatus stored in the first storage unit Determining whether to permit access to the device, detecting the change of the second user information in the first storage unit, and detecting the change of the second user information, Transmitting the change information indicating the change contents of the second user information to the system control device that controls the arithmetic processing device included in the information processing device. That.

The control program of the system control device is a control program of the system control device that controls the arithmetic processing devices included in each of the plurality of information processing devices, and when the first user information indicating the first user is input, The system by the first user based on first user information and second user information indicating a second user having access authority to the system control device stored in the first storage unit Determining whether or not to permit access to the control device; and the first first stored in the second storage unit of any one of the plurality of information processing devices. Receiving, from the first first processing device, change information indicating the change contents of the third user information of the third user having access authority to the processing device; Based on the change information, and a step of updating the second user information in the first storage unit to the system controller.

According to the information processing apparatus, the information processing apparatus control method, the information processing apparatus control program, and the system control apparatus control program disclosed in this application, the user information can be easily changed.

It is a block diagram which shows the hardware constitutions of the server as an information processing apparatus which concerns on embodiment. It is a figure for demonstrating the partition in a server and system control apparatus which concern on embodiment. It is a figure for demonstrating the user information in a partition. It is a figure for demonstrating a user information backup file. It is a figure for demonstrating the user information in a system control apparatus. It is a figure for demonstrating operation | movement of a partition and a system control apparatus. It is a figure which shows the functional block of a monitoring agent part. It is a figure which shows the functional block of the user authentication part of a system control apparatus. It is a flowchart which shows the operation | movement of the information synchronous process in the monitoring agent part which concerns on embodiment. It is a flowchart which shows operation | movement of the user authentication part of the system control apparatus which concerns on embodiment. It is a flowchart which shows operation | movement of the user authentication process in the user authentication part of the system control apparatus which concerns on embodiment. It is a figure for demonstrating the server which does not apply the technique disclosed by this specification. It is a figure which shows an example of the server to which this invention is applied.

Hereinafter, embodiments will be described with reference to the drawings.

FIG. 1 is a block diagram illustrating a hardware configuration of a server as an information processing apparatus according to an embodiment. The server 1 includes an SVP 11, SB (System board) 12A to 12N, IOB (I / O Board) 13A to 13B, and HDD (Hard Disk Drive) 14. The SVP 11 is connected to the SBs 12A to 12N and the HDD 14 through control lines. The SVP 11 transmits user information, which will be described later, from the SBs 12A to 12N via the control line. The SVP 11 is connected to a console 2 as a terminal device outside the server 1 and a network. The SBs 12A to 12N and the IOBs 13A to 13N are connected via a bus, and the IOBs 13A to 13N are connected to a network.

The server 1 logically divides the SBs 12A to 12N, the IOBs 13A to 13N, and the HDD 14 into a plurality of partitions according to a user definition, and constructs an independent OS environment for each. For example, the server 1 cooperates the SBs 12A to 12B, the IOBs 13A to 13C, and the HDD 14 to construct a partition that is operated using one OS. Note that the user appropriately sets the number of partitions and how many SBs and IOBs are used to construct each partition.

The SVP 11 realizes a system control device that controls and monitors hardware resources such as the SBs 12A to 12N. The SVP 11 has a CPU 111 and a memory 112. The SVP 11 acquires input information such as a user account and a password input by the user to the console 2. Further, the SVP 11 acquires input information input by a user to an external terminal device via a network.

The SBs 12A to 12N have a CPU 121 and a memory 122. Input information and the like are input to the IOBs 13A to 13N from the network. The SBs 12A to 12N obtain input information and the like from the IOBs 13A to 13N via the bus. The HDD 14 stores a plurality of OSs operated on the partition, user information, and the like.

FIG. 2 is a diagram for explaining the partitions in the server 1 and the system control apparatus according to the embodiment. The partition 41A includes an OS 411A, a user authentication unit 412A and a monitoring agent unit 413 operating on the OS 411A, user information 414A used for user authentication, and a user information save file 415A. The OS 411A preferably has a user information change notification function for sending a user information change notification indicating the change of the user information 414A to the monitoring agent unit 413 when the user information 414A is changed. The OS 411A is, for example, Linux (registered trademark) having an initiating function for monitoring events in the file system. The partitions 41B to 41N have the same configuration as that of the partition 41A, but the SBs 12A to 12N and IOBs 13A to 13N constituting the partitions are different. In this embodiment, the SB and IOB for constructing each partition are different, but one partition may be constructed by a plurality of SBs and IOBs. A plurality of partitions may be constructed by the same SB and IOB.

In the embodiment, it is assumed that the OSs 411A to 411N, the user authentication units 412A to 412N, the user information save files 415A to 415N, and the user information 414A to 414N are different from each other. Note that these may be the same or only part of the partitions may be the same.

The user authentication units 412A to 412N are realized by the cooperation of the CPU 121 and the memory 122, and have user authentication functions that the OSs 411A to 411N support as standard. User authentication units 412A to 412N accept user operations such as login (access) to a partition from a terminal device connected to a network or hardware for building a partition, and determine whether or not the user can log in I do. For example, it is assumed that a user logs in (accesses) to the partition 41A. In this case, the user authentication unit 412A performs a user authentication process based on the input information input by the user and the user information 414A using the user authentication function.

Note that the user can access the user authentication units 412A to 412N by any method. If the user can select and set in advance and the user can access the user authentication units 412A to 412N, communication other than via the network may be selected.

The monitoring agent unit 413 is realized by the cooperation of the CPU 121 and the program stored in the memory 122, acquires the usage status of the hardware resources that construct the partitions 41A to 41N, and is connected to the system controller 5. The usage status is notified to the system control device 5 via the control line. In addition, the monitoring agent unit 413 transmits data such as user information 414 </ b> A to the system control device 5 via a control line. The monitoring agent unit 413 generates and updates the user information save file 415A.

The system control device 5 is realized by the SVP 11 and includes a user authentication unit 51 and user information 52 used for user authentication. The user authentication unit 51 is realized by the cooperation of the CPU 111 and a program stored in the memory 112. When the user logs in to the system control device 5, the user authentication unit 51 performs user authentication processing for determining whether or not the user can be authenticated based on the input information input by the user and the user information 52. In addition, the user authentication unit 51 makes an authentication request, which will be described later, to the user authentication units 412A to 412N using the user account and password of the user who logs in to the system control device 5. The user authentication unit 51 accesses the user authentication units 412A to 412N via the network.

Next, user information 414A will be described as an example of user information 414A to 414N. FIG. 3 is a diagram for explaining the user information 414A in the partition 41A. The user information 414A is information indicating a plurality of users having access authority to the partition 41A. The user information 414A has individual information used for user authentication of the plurality of users. The individual information includes valid / invalid information indicating whether or not the individual information is valid, a user account for logging in to the partition 41A, and user detailed information. The user detailed information includes authority information indicating a user authority capable of logging in to the system control device 5, a password for logging in to the partition 41A, and attached information. Examples of the attached information include a user name, a telephone number, and an expiration date when the user can log in to the partition. Note that the format of the user information 414A to 414N differs depending on the type of OS, user authentication unit, etc. of the partitions 41A to 41N.

Next, the user information save file 415A will be described as an example of the user information save files 415A to 415N. FIG. 4 is a diagram for explaining the user information save file 415A. The user information save file 415A has user accounts of a plurality of users having access authority to the partition 41A. Specifically, the user information 414A has only a user account associated with authority information. Similarly to the user information save file 415A, the user information save files 415B to 415N have user accounts associated with authority information among users who can log in to the partition. The user information save files 415A to 415N are preferably set so that they cannot be changed by the user.

In the embodiment, it is assumed that the user information 414A to 414N and the user information saving files 415A to 415N are stored in the storage area of the HDD 14 that constructs each partition. The individual information of the user information 414A to 414N and the contents of the user information save files 415A to 415N are different from each other. Note that the user information 414A to 414N and the user information save files 415A to 415N may be stored in the memory 122.

Next, the user information 52 will be described. FIG. 5 is a diagram for explaining the user information 52 in the system control device 5. The user information 52 is information indicating a plurality of users having access authority to the system control device 5. The user information 52 includes individual information used for user authentication of the plurality of users. The individual information is information indicating a user account, valid / invalid information, a partition number that is an identifier indicating a partition to which the user of the individual information belongs, a user account for logging in to the system control device 5, and a user Detailed information. The user detailed information includes authority information, a password for logging in to the system control device 5, and attached information. The attached information includes, for example, a user name, a telephone number, and an expiration date when the user can log in to the system control device 5.

Note that, when the user does not belong to any of the partitions 41A to 41N, “0” indicating that the user does not belong to the partition is set as the partition number. If the user does not belong to any of the partitions 41A to 41N, the partition number may not be added to the individual information. In the embodiment, the user account and password when logging in to the partition 41A of the user associated with the authority information are the same as the user account and password when logging in to the system control device 5. The user information 52 is assumed to be stored in the HDD 14. Note that the user information 52 may be stored in the memory 112.

Next, operations of the partitions 41A to 41N and the system controller 5 will be briefly described with reference to FIG. First, operations of the partition 41A and the system control device 5 when the user logs in to the system control device 5 will be described.

FIG. 6 is a diagram for explaining the operation of the partition 41A and the system control device 5. In this figure, it is assumed that the administrator 81 has authority to install the OS 411 and the monitoring agent unit 413, and to add and delete user information to the partition 41A. Further, it is assumed that the user 82 has an access right to log in to the partition 41A or the system control device 5.

When the user 82 accesses the system control device 5, the user authentication processing performed by the user authentication unit 51 differs depending on the state of the partition 41A to which the user 82 belongs. There are the following three states of the partition 41A. (1) A state where the partition 41A is in a stopped state and the OS 411A and the monitoring agent unit 413 are not installed. (2) A state in which the partition 41A is in a stopped state and the OS 411A and the monitoring agent unit 413 are already installed. (3) A state in which the partition 41A is in operation. The stopped state is a state in which the SBs 12A to 12N and IOBs 13A to 13N that construct the partition are stopped. First, the state (1) will be described. In the state (1), the user 82 does not yet have a user account in the partition 41A and the system control device 5.

When the administrator 81 installs the OS 411A and the monitoring agent unit 413 for the partition 41A, the monitoring agent unit 413 reads the user information 414A. The user information 414A is generated by the administrator 81 at the time of installation. Further, the user information 414A may be stored in advance in the storage area of the HDD 14 that constructs the partition 41A. After reading, the monitoring agent unit 413 generates a user information save file 415A based on the read user information 414A. After generation, the monitoring agent unit 413 transmits a part of the user information 414A such as a user account and authority information to the user authentication unit 51, and the user authentication unit 51 monitors the received part of the user information 414A and the transmission source. The user information 52 is updated based on the partition number of the partition 41A to which the agent unit 413 belongs.

After the update, the user authentication unit 51 searches the user information 52 when access from the user 82, that is, input information is input. After the search, it is checked whether or not the partition 41A having the partition number corresponding to the user account of the input information is in operation. When the partition 41A with the partition number corresponding to the user account of the input information is in operation, the user authentication unit 51 uses the user account and password of the input information to communicate with the user authentication unit 412A via the network or control line. Send authentication request. The authentication request shows the user account and password of the input information. The user authentication unit 412A searches the user information 414A in response to the authentication request from the user authentication unit 51, and authenticates the user account and password when the user account and password indicated in the authentication request are in the user information 414A. . After the authentication, the user authentication unit 51 permits the user 82 to log in to the system control device 5 and writes the password input by the user 82 into the user information 52.

In addition to the user authentication process described above, the administrator 81 may additionally register user information such as the user account, authority information, and password of the user 82 in the system control device 5. In this case, the user authentication unit 51 searches the user information 52 based on the input information from the user 82 and determines whether or not to log in.

Next, the state (2) will be described. The user authentication unit 51 searches the user information 52 when input information is input from the user 82. After the search, it is checked whether or not the partition 41A having the partition number corresponding to the user account of the input information is in operation. When the partition 41A of the partition number corresponding to the user account of the input information is not in operation, the user authentication unit 51 acquires a password from the user information 52, searches for the password of the input information, and searches for the password and the password of the user information 52 And compare. When the password input by the user 82 matches the password of the user information 52, the user authentication unit 51 authenticates the user 82 and permits the user 82 to log in.

Next, the state (3) will be described. The user authentication unit 51 searches the user information 52 when input information is input from the user 82. After the search, it is determined whether or not the partition 41A having the partition number corresponding to the user account of the input information is in operation. When the partition 41A having the partition number corresponding to the user account of the input information is in operation, the user authentication unit 51 sends an authentication request to the user authentication unit 412A via the network using the user account and password of the input information. Send. The user authentication unit 412A searches the user information 414A in response to the authentication request from the user authentication unit 51, and authenticates the user account and password when the user account and password indicated in the authentication request are in the user information 414A. . After the authentication, the user authentication unit 51 permits the user 82 to log in to the system control device 5 and writes the password input by the user 82 into the user information 52.

Next, a synchronization process for synchronizing the user information 414A and the user information 52 by the monitoring agent unit 413 and the user authentication unit 51 when the user information 414A of the partition 41A is changed will be described. The change of the user information 414A performed by the administrator 81 or the user 82 includes the following three types. (1) Add individual information. (2) Deletion of individual information. (3) User detailed information change. First, (1) addition of individual information will be described.

The monitoring agent unit 413 monitors whether the user information 414A has been changed. Here, when the administrator 81 logs in to the partition 41A and changes the user information, the monitoring agent unit 413 determines that the user information 414A has been changed. Here, the change content of the user information is addition of individual information of the user 82. Note that the authority of an administrator who can add and delete individual information is set in the partition 41A, and the administrator 81 performs setting with this administrator authority. When the monitoring agent unit 413 determines that there is an additional change of the individual information, the monitoring agent unit 413 transmits additional information including the user account of the user 82 and the authority information to the user authentication unit 51 via the control line, and user information The save file 415A is updated. The user authentication unit 51 that has received the additional information adds the user account and authority information indicated in the additional information to the user information 52.

After the addition of individual information such as password registration to the partition 41A is completed and the user information 52 is updated, the user 82 can log in to the system control device 5. In addition, since the addition of individual information such as password registration to the partition 41A has been completed, the user 82 can log in to the partition 41A. The login to the system control device 5 is the same processing as that in the above-described partition state (3) when the partition is in operation, and the description thereof will be omitted. The monitoring agent unit 413 or the user authentication unit 51 may notify the administrator 81 that the addition of the individual information has ended after the addition of the individual information has been completed.

Next, of the changes in the user information 414A, (2) deletion of individual information will be described. The administrator 81 logs into the partition 41A and deletes the individual information of the user 82. Here, the monitoring agent unit 413 determines that the user information 414A has been changed. When the monitoring agent unit 413 determines that the change content is deletion of individual information, the user authentication unit 51 receives the deletion information including the user account and authority information of the individual information of the deleted user 82 via the control line. And the user information save file 415A is updated. The user authentication unit 51 that has received the deletion information deletes the individual information from the user information 52. When the user 82 logs in to the partition 41A and the system control device 5 after the deletion, it is determined that there is no individual information when searching for each piece of user information by the user authentication unit 412A and the user authentication unit 51, and login is impossible.

Next, of the changes in the user information 414A, (3) User detailed information change will be described. The change of the user detailed information includes a change of authority information and a password. First, the change of authority information will be described. The change of authority information is addition or deletion of authority information.

The administrator 81 logs in to the partition 41A and changes the authority information of the user 82. Here, the monitoring agent unit 413 determines that the user information 414A has been changed. When the monitoring agent unit 413 determines that the change content is addition of authority information, the monitoring agent unit 413 transmits additional information including the user account of the user 82 and the authority information to the user authentication unit 51 via the control line, and The information save file 415A is updated. The process of the user authentication unit 51 that has received the additional information is the same process as (1) addition of individual information in the change of the user information 414A described above, and thus the description thereof is omitted. On the other hand, if the monitoring agent unit 413 determines that the change content is deletion of authority information, the monitoring agent unit 413 sends authority deletion information including the user account of the user 82 and authority information to be deleted to the user authentication unit 51 via the control line. At the same time, the user information save file 415A is updated. The user authentication unit 51 that has received the authority deletion information deletes the authority information of the user account in the user information 52. The changed authority information in the user information 52 becomes valid from the next login to the system control device 5.

Next, the password change will be explained. The user 82 logs in to the partition 41A and changes the password. After changing the password, the user 82 logs in to the system control device 5 with the changed new password. When there is input information from the user 82, the user authentication unit 51 searches the user information 52. After the search, it is checked whether or not the partition 41A having the partition number corresponding to the user account of the input information is in operation. If it is in operation, the user authentication unit 51 transmits an authentication request to the user authentication unit 412A via the network using the user account and password of the input information. The user authentication unit 412A searches the user information 414A in response to the authentication request from the user authentication unit 51, and authenticates the user account and password when the user account and password indicated in the authentication request are in the user information 414A. . After the authentication, the user authentication unit 51 permits the user 82 to log in to the system control device 5 and writes the new password of the input information to the user information 52.

Next, functional blocks of the monitoring agent unit 413 and the user authentication unit 52 will be described with reference to FIGS. FIG. 7 is a diagram illustrating functional blocks of the monitoring agent unit 413. The monitoring agent unit 413 includes a determination unit 61, a reading unit 62, an execution unit 63, a change detection unit 64, and a transmission unit 65. The determination unit 61 determines whether or not the user information save files 415A to 415N exist, determines the change contents of the user information 414A to 414N, determines whether or not the user information change notification function exists. The reading unit 62 reads the user information 414A. The execution unit 63 updates the user information save files 415A to 415N, generates the user information save files 415A to 415N, and the like. The change detection unit 64 detects changes in the user information 414A to 414N. The transmission unit 65 transmits change information, additional information, and the like to the user authentication unit 51.

FIG. 8 is a diagram showing functional blocks of the user authentication unit 51 of the system control device 5. The user authentication unit 51 includes a determination unit 71, a transmission / reception unit 72, and an execution unit 73. The determination unit 71 determines whether or not the transmission / reception unit 72 has received input information, change information, or the like. The transmission / reception unit 72 receives input information from the user 82, change information from the monitoring agent unit 413, and the like. In addition, the transmission / reception unit 72 transmits an authentication request or the like. The execution unit 73 compares the input information with the user information 52, updates the user information 52, and the like.

Next, details of operations of the monitoring agent unit 413 and the user authentication unit 51 will be described with reference to FIGS. 9 and 10. FIG. 9 is a flowchart illustrating an operation of information synchronization processing in the monitoring agent unit 413 according to the embodiment. In this flowchart, the monitoring agent unit 413 of the partition 41A will be described as an example. The same operation is performed in the monitoring agent unit 413 in other partitions.

First, when the monitoring agent unit 413 is activated by an operation using the console 2 or the like by the administrator 81 (S101), the determination unit 61 determines whether there is a user information save file 415A (S102). When it is determined that the user information save file 415A exists (S102, YES), the reading unit 62 reads the user information 414A (S103). After reading, the determination unit 61 determines whether there is an increase or decrease in the number of users who can log in to the system control device 5 and addition of authority information based on the comparison between the user information save file 415A and the user information 414A (S104). ).

Specifically, the determination unit 61 includes, among the individual information of the user information 414A, a user account associated with authority information (hereinafter referred to as user account A) and a user account of the user information save file 415A (hereinafter referred to as user account A). User account B). Based on this comparison, the determination unit 61 determines whether there is a user account in the user account A that is not in the user account B and whether there is a user account in the user account B that is not in the user account A. If there is a user account in user account A that is not in user account B, determination unit 61 determines that individual information has been added to user information 414A or that authority information has been added to the individual information in user information 414A. On the other hand, when there is a user account in user account B that is not in user account A, it is determined that the individual information in user information 414A has been deleted. On the other hand, when the user account A and the user account B match, the determination unit 61 determines that there is no increase / decrease of users and addition of authority information.

When it is determined that the increase / decrease of the user or the authority information is added (S104, YES), the transmission unit 65 transmits the change information indicating the change contents of the user information 414A to the user authentication unit 51 via the control line ( S105). The user authentication unit 52 receives the change information and updates the user information 52 based on the change information. Here, the changed content becomes additional information when individual information is added by the determining unit 61 or when it is determined that authority information is added, and becomes deleted information when it is determined that the individual information is deleted. . After the transmission, the determination unit 61 determines whether the authority information has been deleted based on the user information save file 415A and the user information 414A (S106).

Specifically, the determination unit 61 compares the user account of individual information of the user information 414A (hereinafter referred to as user account C) with the user account B. Based on this comparison, the determination unit 61 determines whether the user account B has a user account that is not associated with the authority information of the user account C. When there is a user account in the user account B that is not associated with the authority information of the user account C, the determining unit 61 determines that the authority information of the user account has been deleted. On the other hand, the determination unit 61 determines that the authority information is not deleted when there is no user account B associated with the authority information of the user account C in the user account B.

If it is determined that the authority information has been deleted (S106, YES), the transmission unit 65 transmits the change information indicating the change contents of the user information 414A to the user authentication unit 51 via the control line (S107). The user authentication unit 52 receives the change information and updates the user information 52 based on the change information. Here, the change content is authority deletion information. After the transmission, the execution unit 63 updates the user information save file 415A based on the change information (S108).

Next, the determination unit 61 determines whether or not the OS 411A has a user information change notification function (S109). When it is determined that there is a user information change notification function (S109, YES), the change detection unit 64 waits for a user information change notification notified from the OS 411A (S110). Here, as a function for waiting for a user information change notification, it is desirable to use an innotify function for monitoring events in the file system when the OS is Linux (registered trademark). When the user information change notification is notified from the OS 411A to the change detection unit 64, the process returns to step S102 to determine whether or not the user information save file 415A exists.

If it is determined in step S102 that there is no user information save file 415A (S102, NO), the reading unit 62 reads the user information 414A (S111). After reading, the execution unit 63 generates the user information save file 415A based on the user information 414A (S112). After the generation, the transmission unit 65 transmits additional information including the user account associated with the authority information in the user information 414A, the authority information, and the like to the user authentication unit 51 based on the user information 414A (S113). . The user authentication unit 51 receives the additional information and updates the user information 52 based on the additional information. After the transmission, processing for determining whether or not there is a user information change notification function is performed in step S109.

In step S104, when it is determined that there is no increase or decrease of users who can log in to the system control device 5 and no authority information is added (NO in S104), a process for determining whether or not the authority information is deleted in step S106. Done. If it is determined in step S106 that the authority information has not been deleted (S106, NO), a process of updating the user information save file 415A based on the change information is performed in step S108. If there is no change information in step S108, the execution unit 63 does not update the user information save file 415A.

If it is determined in step S109 that there is no user information change notification function (S109, NO), the change detection unit 64 monitors the user information 414A and polls until there is a change (S114). Here, the change detection unit 64 periodically reads the user information 414A and detects a change. As a detection method, for example, the change detection unit 64 stores the user information 414A in the memory 122 when read, and compares the user information 414A with the user information 414A read after a certain time. After the comparison, the change detection unit 64 stores the current user information 414A in the memory 122 and repeats this. Further, the change detection unit 64 may detect a command for changing the user information 414A. When the change detection unit 64 detects a change in the user information 414A, the process returns to step S102 to determine whether or not the user information save file 415A exists.

FIG. 10 is a flowchart showing the operation of the user authentication unit 51 of the system control apparatus 5 according to the embodiment. First, the determination unit 71 determines whether or not the transmission / reception unit 72 has received input information from the user 82 (S201). When it is determined that the input information has been received (S201, YES), a user authentication process described later is executed (S202). After the user authentication process, the process returns to step S201, and a process of determining whether or not input information from the user 82 is received again is performed.

When it is determined that the input information has not been received (S201, NO), the determination unit 71 determines whether the transmission / reception unit 72 has received the change information from the monitoring agent unit 413 (S203). When it is determined that the change information has been received (S203, YES), the execution unit 73 updates the user information 52 based on the received change information. For example, if the change information is additional information, the execution unit 73 writes the user account and authority information indicated in the additional information to the user information 52. If the change content is deletion information, the execution unit 73 indicates the deletion information from the user information 52. Delete the individual information corresponding to the user account. Note that the validity / invalidity information of the user account may be invalidated. If the change information is authority deletion information, the execution unit 73 deletes the authority information of the user account in the user information 52 corresponding to the user account indicated in the authority deletion information. Here, when the user account of the additional information is already in the user information 52, the execution unit 73 determines that the additional information is addition of authority information, and sends the user account and authority information indicated in the additional information to the user information 52. Write. In this case, the authority information is written without changing the user account.

After the update, the process returns to step S201, and the process of determining whether or not the input information from the user 82 has been received again is performed. If it is determined that the change information has not been received (S203, NO), the process returns to step S201, and a process for determining whether or not the input information from the user 82 has been received is performed again.

Next, the user authentication process in step S202 will be described. FIG. 11 is a flowchart showing an operation of user authentication processing in the user authentication unit 51 of the system control apparatus 5 according to the embodiment. When it is determined that the input information has been received (S201, YES), the determination unit 71 determines whether or not the user information 52 is included in the user information 52 (S301). When it is determined that the user account indicated by the input information is in the user information 52 (S301, YES), the determination unit 71 determines whether or not the user 82 is a user belonging to a partition (S302). . Specifically, the determination unit 71 determines based on whether or not the individual information having the user account in the user information 52 corresponding to the user account of the input information has a partition number.

When it is determined that the user 82 is a user belonging to a partition (S302, YES), the determination unit 71 determines whether or not the OS of the partition to which the user 82 belongs is operating ( S303). Here, for explanation, it is assumed that the partition to which the user 82 belongs is the partition 41A. This determination is made by the determination unit 71 using a function of monitoring hardware resources that construct each partition of the system control device 5. Note that the state of hardware resources for constructing each partition and the operating state of the OS of each partition may be stored in the memory 112 in advance, and the determination unit 71 may read this and make a determination. When it is determined that the OS 411A is operating (S303, YES), the transmission / reception unit 72 transmits an authentication request to the user authentication unit 412A of the partition 41A using the user account and password of the received input information ( S304).

After transmission, the determination unit 71 determines whether or not the user account and password indicated in the authentication request have been authenticated (S305). This determination is based on a determination by the user authentication unit 412A as to whether or not the user information and password indicated in the authentication request are in the user information 414A. Specifically, the user authentication unit 412A determines whether or not the user information 414A matches the user account and password indicated in the received authentication request. After the determination, the user authentication unit 412A transmits the determination result to the user authentication unit 51. Here, when it is determined that the user account and the password match, the determination result indicates authentication of the user account and password indicated in the authentication request. On the other hand, when it is determined that the user account and the password do not match, the determination result indicates that the user account and password indicated in the authentication request cannot be authenticated. The transmission / reception unit 72 receives the determination result transmitted from the user authentication unit 412A.

When it is determined that the determination result indicates authentication of the user account and password indicated in the authentication request (S305, YES), the execution unit 73 matches the user information 52 of the input information with the user account of the input information. Is written in the HDD 14 in association with the user account (S306), and the user information 52 is updated. After the writing, the transmission / reception unit 72 notifies the user 82 of login permission (S307). After the notification, the process returns to step S201, and a process for determining whether or not the input information from the user 82 has been received again is performed.

If it is determined in step S302 that the user 82 is not a user belonging to the partition (S302, NO), the determination unit 71 determines whether or not the password of the input information has already been set in the user information 52. (S308). When it is determined that the password is already set in the user information 52 (S308, YES), the determination unit 71 determines the password of the input information and the password of the user account in the user information 52 corresponding to the user account of the input information. To determine whether or not the passwords match (S309). If it is determined that the passwords match (S309, YES), a process of notifying the user 82 of login permission is performed in step S307.

On the other hand, when it is determined in step S308 that the password is not set in the user information 52 (S308, NO), the transmission / reception unit 72 notifies the user 82 of rejection of login (S310). After the notification, the process returns to step S201, and a process for determining whether or not the input information from the user 82 has been received again is performed. When it is determined in step S301 that the user account indicated in the input information is not in the user information 52 (S301, NO), a process of notifying the user 82 in step S310 of login rejection is performed. If it is determined in step S305 that the determination result indicates that the user account and password indicated in the authentication request cannot be authenticated (NO in step S305), a process of notifying the user 82 in step S310 of login rejection is performed. Is called. If it is determined in step S309 that the passwords do not match (S309, NO), a process of notifying login rejection to the user 82 in step S310 is performed.

In the embodiment, it is determined whether or not there is an input from the user 82 in step S201, but it may be determined whether or not an input of a user account is input. In this case, after the process of determining whether or not the user account indicated in the input information in step S301 is in the user information 52, the execution unit 73 notifies the user 82 to input the password. After the notification, the determination unit 71 determines whether or not a password has been input within a specified time. When the password is input, a process of determining whether or not the user 82 in step S302 is a user belonging to a partition is executed.

The user information save files 415A to 415N have been described as having user accounts of a plurality of users having the authority to access their own partitions, but may include all the user information 414A to 414N information. The user information 52 has been described as information indicating a plurality of users having access authority to the system control apparatus 5, but may include information on users who do not have access authority to the system control apparatus 5. .

Next, as a comparative example, a method for controlling an information processing apparatus that does not apply the technology disclosed in this specification will be described. When synchronizing the user information 414A to 414N of the partitions 41A to 41N and the user information 52 of the system control device 5 without applying the technique disclosed in this specification, for example, there are the following methods. An authentication server is built outside the server 1 or in one partition in the server 1, and the system controller 5 can support the partitions 41A to 41N, and uses LDAP (Lightweight Directory Access Protocol) that accesses the authentication server. A user authentication function (hereinafter referred to as an extended user authentication function) is additionally constructed. By constructing the extended user authentication function and the authentication server, the user information 414A to 414N of the partitions 41A to 41N and the partitions 41A to 41N and the user information 52 of the system control device 5 are synchronized.

FIG. 12 is a diagram for explaining a server to which the technology disclosed in this specification is not applied. Compared with the server 1 shown in FIG. 2, the server 8 has monitoring agent units 82A to 82N instead of the monitoring agent unit 413 in the partitions 41A to 41N, respectively. The server 8 includes extended user authentication units 83A to 83N having an extended user authentication function in each of the partitions 41A to 41N. Compared with the server 1 shown in FIG. 2, the system control device 84 includes a user authentication unit 85 instead of the user authentication unit 51 and an extended user authentication unit 86 having an extended user authentication function that can be selected by setting.

The authentication server 87 is constructed on the network. The authentication server 87 is connected to hardware resources and the system control device 84 that construct the partitions 41A to 41N via the network. The authentication server 87 has user information 871 in which user information 414A to 414N and user information 52 are associated with each other.

The monitoring agents 82A to 82N acquire the usage status of the hardware resources that construct the partitions 41A to 41N, and notify the usage status to the system control device 84 via the control line connected to the system control device 84. The user authentication unit 85 performs a user authentication process for determining whether or not the user can be authenticated based on a user account and a password input by the user.

Extended user authentication units 83A to 83N access user information of a partition to which the extended user authentication unit 83A to 83N belongs. The extended user authentication unit 86 accesses the user information 52 of the system control device 84. The authentication server 87 synchronizes the user information 414A to 414N and the user information 52 via the extended user authentication units 83A to 83N and the extended user authentication unit 86.

According to the embodiment, by synchronizing the user information 414A to 414N and the user information 52, the user information 414A to 414N and the user information 52 can be easily changed. The user information 414A to 414N, the user information 52, and the like can be obtained using the user authentication units 412A to 412N having the standard user authentication function of each OS without additionally constructing the authentication server 87 and the extended user authentication units 83A to 83N and 86. Can be synchronized. For example, information on users who can log in to the partition 41A and the system control apparatus 5 can be shared by the partition 41A and the system control apparatus 5. For this reason, the administrator 81 can add or delete a user to or from the system control apparatus 5 only with the effort of adding or deleting a user to or from the partition 41A.

When synchronizing the user information 414A to 414N and the user information 52, the monitoring agent 413 synchronizes the user account and authority information that are rarely updated by data transmission, but does not synchronize the password by data transmission. When the user logs in to the system control device 5, the user authentication units 412A to 412N use the input information from the user 82 to determine authentication, and if the password is authenticated, the password of the input information is written in the user information 52. Updated. From this, it is possible to reduce the amount of information such as the number of data transmissions and data transmissions from the partitions 41A to 41N to the system control apparatus 5. Furthermore, since the system controller 5 does not access the partitions 41A to 41N except for the partition status check and the authentication request, the influence on the security of the partitions 41A to 41N can be reduced.

In the comparative example, when the OSs of the partitions 41A to 41N are different from each other, the user 82 and the like require a large amount of setting work for additionally constructing the extended user authentication units 83A to 83N, and the setting work becomes complicated when the number of partitions increases. There is a possibility of becoming. However, according to the embodiment, since it is not necessary for the user 82 or the like to additionally construct the extended user authentication units 83A to 83N, the setting work does not require a great effort, and even when the number of partitions increases, Setting work can be facilitated.

In the comparative example, the extended user authentication function of the extended user authentication units 83A to 83N is limited to the extended user authentication function that can be supported by the system control device 84. Therefore, if the extended user authentication functions of the extended user authentication units 83A to 83N in the partition requested by the user 82 or the like are different for each partition, the authentication server may not be unified into one server or may not be used. However, according to the embodiment, since the extended user authentication units 83A to 83N and the authentication server 87 are not used, this possibility does not exist.

In the comparative example, there is a possibility that the user information of the SE cannot be synchronized between the partitions 41A to 41N and the system control device 84 due to the requirements for construction of the partitions 41A to 41N. Further, due to security such as prohibiting information update in the partitions 41A to 41N from devices outside the partitions 41A to 41N, there is a possibility that the user information of the SE cannot be synchronized between the partitions 41A to 41N and the system controller 84. is there. However, according to the embodiment, since only one-way data transmission from the monitoring agent unit 413 to the user authentication unit 51 is performed, the information operation of the user information 414A to 414N is not performed from the outside. Therefore, the user information can be synchronized between the partitions 41A to 41N and the system control apparatus 5 without being affected by the security restrictions of the partitions 41A to 41N.

In some cases, the user information 414A to 414N and the user information 52 are not synchronized, but an authentication server is constructed on the partition, and only the user authentication function of the authentication server is used to log in to the partition and the system control device. In this case, if the user 82 powers off the hardware resources of the partition on which the authentication server is constructed, the authentication server is stopped. Therefore, the user 82 cannot operate the system control device and cannot power on the partition. Therefore, a special user who can operate the system control device is always registered in the system control device. However, according to the embodiment, for example, information on users who can log in to the partition 41A and the system control apparatus 5 is shared by the partition 41A and the system control apparatus 5 without using an authentication server. For this reason, even when the partition 41A is in the stopped state, the user can log in to the system control apparatus without registering the user in the system control apparatus 5 separately. Accordingly, it is possible to log in to the system control device 5 regardless of the operation / stop of the partition 41A. Therefore, it is not always necessary to register a special user in the system control device 5.

The present invention can be applied to the following servers. FIG. 13 is a diagram illustrating an example of a server to which the present invention is applied. A server 901 illustrated in FIG. 13 includes a main body 902 that includes a CPU, a disk drive, and the like, and a communication device 903 that accesses an external database and downloads programs and the like stored in another computer system. The communication device 903 may be a network communication card, a modem, or the like.

As described above, a program for executing the above steps in the server 901 constituting the server 1 can be provided as a control program. By storing this program in a recording medium readable by the server 901, the server 901 constituting the server 1 can execute the program. Each program for executing the above steps is stored in a portable recording medium such as a disk 910 or downloaded from a recording medium 920 of another server or computer system by the communication device 903. Also, a control program (control software) that causes the server 901 to have at least a control function is input to the server 901 and compiled. This program causes the server 901 to operate as the server 1 having a control function. Further, these programs may be stored in a computer-readable recording medium such as a disk 910, for example. Here, the recording medium that can be read by the server 901 includes an internal storage device such as a ROM and a RAM, a portable storage medium such as a disk 910, a flexible disk, a DVD disk, a magneto-optical disk, and an IC card. Or a database holding a computer program, or another server or computer system, and these databases, or various recording media accessible by a server or computer system connected via communication means such as the communication device 903 .

The first processing device, the first first processing device, and the third processing device are, for example, partitions 41A to 41N, and the second processing device and the system control device are, for example, the system control device 5. The information processing apparatus is, for example, the server 1 or the partitions 41A to 41N. The first storage unit and the second storage unit are, for example, the HDD 14. The first user information and the second user information are, for example, user information 414A to 414N, and the third user information is, for example, the user information 52. The fourth user information is, for example, input information, and the fifth user information is, for example, authority information. The sixth user information is, for example, user information save files 415A to 415N, and the determination information is, for example, a determination result. The first determination unit, the fourth determination unit, the second reception unit, and the third transmission unit are, for example, user authentication units 412A to 412N. The second update unit is, for example, the execution unit 63, and the first transmission unit is, for example, the transmission unit 65. The detection unit is, for example, the change detection unit 64. The second determination unit, the third determination unit, and the permission unit are, for example, the determination unit 71, and the first reception unit, the third reception unit, and the second transmission unit are, for example, the transmission / reception unit 72. . The first updating unit and writing unit are, for example, the execution unit 73.

1 server, 2 console, 5 system controller, 11 SVP, 12A-12N SB, 13A-13N IOB, 14 HDD, 41A-41N partition, 51 user authentication part, 52 user information, 61 judgment part, 62 reading part, 63 Execution unit, 64 change detection unit, 65 transmission unit, 71 determination unit, 72 transmission / reception unit, 73 execution unit, 81 administrator, 82 user, 111 CPU, 112 memory, 121 CPU, 122 memory, 411A to 411N OS, 412A to 412N user authentication part, 413 monitoring agent part, 414A-414N user information, 415A-415N user information save file.

Claims

An information processing apparatus comprising: a plurality of first processing devices each having an arithmetic processing device; and a second processing device that controls the arithmetic processing devices included in each of the plurality of first processing devices,
The first processing device of any one of the plurality of first processing devices is
A first storage unit that stores first user information indicating a first user who has access authority to the first processing apparatus;
When the second user information indicating the second user is input, based on the second user information and the first user information, to the one first processing device by the second user A first determination unit for determining whether or not to allow access to
A detection unit for detecting a change in the first user information in the first storage unit;
A first transmission unit configured to transmit change information indicating a change content of the first user information to the second processing device when a change in the first user information is detected by the detection unit;
The second processing device includes:
A second storage unit for storing third user information indicating a third user who has an access right to the second processing device;
When the fourth user information indicating the fourth user is input, the fourth user accesses the second processing device based on the fourth user information and the third user information. A second determination unit that determines whether or not to permit
A first receiver for receiving the change information transmitted from the first transmitter;
An information processing apparatus comprising: a first updating unit that updates the third user information in the second storage unit based on the change information received by the first receiving unit.
In the information processing apparatus,
The first user information includes, for each first user, fifth user information indicating whether or not the first user is a fifth user who has an access right to the second processing device. Including
The first storage unit further stores sixth user information indicating the fifth user among the first users,
The detection unit detects a change in the fifth user information based on the first user information and the sixth user information,
The information processing apparatus according to claim 1, wherein the change information indicates a change of the fifth user information.
In the information processing apparatus,
The one first processing apparatus includes:
When the change in the fifth user information in the first storage unit is detected by the detection unit, the second user information in the first storage unit is updated based on the change information. The information processing apparatus according to claim 2, further comprising an update unit.
In the information processing apparatus,
The third user information includes a user account of a fifth user, and an identifier of a third processing device that can be accessed by a fifth user among the plurality of first processing devices,
The fourth user information includes a user account of the fourth user,
The second processing device includes:
The apparatus further comprises a third determination unit that determines whether or not the fourth user is a fifth user based on the third user information and the fourth user information. The information processing apparatus according to claim 2 or claim 3.
In the information processing apparatus,
The first user information includes a user account of a fifth user and a password corresponding to the user account,
The third user information includes a password corresponding to the user account of the fifth user,
The fourth user information includes a password corresponding to the user account of the fourth user,
The second processing device includes:
When the third determination unit determines that the fourth user is the fifth user, the fourth user information is sent to the third processing device indicated by the identifier corresponding to the fourth user. A second transmission unit for transmitting,
The first processing device includes:
A second receiver for receiving the fourth user information transmitted by the second transmitter;
A fourth determination unit configured to determine whether the first user information includes a user account and a password of the fourth user indicated by the fourth user information received by the second reception unit; The information processing apparatus according to claim 4, further comprising:
In the information processing apparatus,
The first processing device includes:
When the fourth determination unit determines that the received user account and password of the fourth user information are included in the first user information, determination information indicating a result of the determination A third transmitter for transmitting to the second processing device;
The second processing device includes:
A third receiver for receiving the determination information transmitted by the third transmitter;
The information processing apparatus according to claim 5, further comprising: a permission unit that permits access of the fourth user when the determination information is received by the third reception unit.
In the information processing apparatus,
The second processing device includes:
A writing unit that writes the password in the fourth user information in the second storage unit in association with the user account of the fourth user when the determination information is received by the third receiving unit The information processing apparatus according to claim 6, further comprising:
In the information processing apparatus,
When it is determined by the third determination unit that the fourth user is not the fifth user, the second determination unit is configured based on the fourth user information and the third user information. The information processing apparatus according to claim 4, wherein it is determined whether to permit access by the fourth user.
In the information processing apparatus,
When the third processing unit determined by the third determination unit that the fourth user is the fifth user and indicated by the identifier corresponding to the fourth user is in the stopped state, the second user 5. The information according to claim 4, wherein the determination unit determines whether to permit access of the fourth user based on the fourth user information and the third user information. Processing equipment.
A control method for an information processing apparatus, comprising: a plurality of first processing devices each having an arithmetic processing device; and a second processing device that controls the arithmetic processing devices included in each of the plurality of first processing devices. And
When first user information indicating a first user is input to any one of the plurality of first processing devices, the first user information and the first first information Based on the second user information indicating the second user who has the authority to access the first processing device stored in the first storage unit of the processing device, the first user performs the Determining whether to allow access to one first processing apparatus by the first first processing apparatus;
Detecting the change of the second user information in the first storage unit by the first processing device;
When the change of the second user information is detected by the first first processing device, the second processing information indicating the change content of the second user information is received by the first first processing device. Transmitting to the processing device;
When the third user information indicating the third user is input, the third user information and the second processing device stored in the second storage unit of the second processing device are stored. Based on the fourth user information indicating the fourth user having access authority, the second processing device determines whether or not to permit the third user to access the second processing device. And steps to
Receiving the change information transmitted from the first processing device by the second processing device;
Causing the information processing apparatus to execute the step of updating the fourth user information in the second storage unit by the second processing apparatus based on the change information received by the second processing apparatus. A method for controlling an information processing apparatus.
In the control method of the information processing apparatus,
The second user information is, for each second user, fifth user information indicating whether or not the second user is a fifth user who has an access right to the second processing device. Including
The first storage unit further stores sixth user information indicating the fifth user among the second users,
The step of detecting the change of the second user information in the first storage unit by the first processing device is based on the second user information and the sixth user information. Detects changes in user information for
The method according to claim 10, wherein the change information indicates a change of the fifth user information.
In the control method of the information processing apparatus,
If the change of the fifth user information in the first storage unit is detected by the first processing device, the sixth user information in the first storage unit based on the change information The information processing apparatus control method according to claim 11, further causing the information processing apparatus to execute a step of updating the information by the first processing apparatus.
In the control method of the information processing apparatus,
The fourth user information includes a user account of a fifth user and an identifier of a third processing device that can be accessed by a fifth user among the plurality of first processing devices,
The third user information includes a user account of the third user,
The information processing apparatus further includes a step of determining by the second processing apparatus whether or not the third user is a fifth user based on the fourth user information and the third user information. The information processing apparatus control method according to claim 11, wherein the control method is executed.
In the control method of the information processing apparatus,
The second user information includes a user account of a fifth user and a password corresponding to the user account,
The fourth user information includes a password corresponding to the user account of the fifth user,
The third user information includes a password corresponding to the user account of the third user,
When the second processing device determines that the third user is the fifth user, the third user information is sent to the third processing device indicated by the identifier corresponding to the third user. Transmitting by the second processing device;
Receiving the third user information transmitted by the second processing device by the third processing device;
Whether or not the second user information includes the user account and password of the third user indicated by the third user information received by the third processing device is determined by the third processing device. The information processing apparatus control method according to claim 13, further comprising: causing the information processing apparatus to execute a determining step.
In the control method of the information processing apparatus,
When the third processing device determines that the received user account and password of the third user information are included in the second user information, determination information indicating a result of the determination is displayed as the first information. Transmitting to the second processing device by the third processing device;
Receiving the determination information transmitted by the third processing device by the second processing device;
When the determination information is received by the second processing device, the information processing device is further caused to execute the step of permitting the third processing device access by the second processing device. Item 15. A method for controlling an information processing apparatus according to Item 14.
In the control method of the information processing apparatus,
When the determination information is received by the second processing device, the password in the third user information is associated with the user account of the third user and stored in the second storage unit. The information processing apparatus control method according to claim 15, further causing the information processing apparatus to execute a step of writing by the processing apparatus.
An information processing apparatus control program for controlling an information processing apparatus having an arithmetic processing unit,
When the first user information indicating the first user is input, the first user information and the second user who has access authority to the information processing apparatus stored in the first storage unit are shown. Determining whether to allow access to the information processing apparatus by the first user based on second user information;
Detecting a change in the second user information in the first storage unit;
When the change of the second user information is detected, the step of transmitting the change information indicating the change content of the second user information to a system control device that controls the arithmetic processing device included in the information processing device; An information processing apparatus control program that is executed by an information processing apparatus.
A control program for a system control device that controls arithmetic processing devices respectively included in a plurality of information processing devices,
When the first user information indicating the first user is input, the first user information and the second user who has access authority to the system control device stored in the first storage unit are shown. Determining whether to permit access to the system controller by the first user based on second user information;
A third user of a third user who has access authority to the first first processing device stored in the second storage unit included in the first processing device of any one of the plurality of information processing devices. Receiving change information indicating a change content of the information from the first processing device;
A control program for a system control apparatus, causing the system control apparatus to execute a step of updating the second user information in the first storage unit based on the received change information.