WO2015090116A1

WO2015090116A1 - Login method and desktop management device

Info

Publication number: WO2015090116A1
Application number: PCT/CN2014/089858
Authority: WO
Inventors: 张冠男; 林国仁
Original assignee: 华为技术有限公司
Priority date: 2013-12-17
Filing date: 2014-10-30
Publication date: 2015-06-25
Also published as: CN104717261B; CN104717261A

Abstract

Disclosed is a login method, comprising: receiving, by a desktop management device, a login request of a cloud terminal, and conducting identity authentication on a non-AD management authentication server; saving a login account number and a login password, and according to the login account number and the login password, generating a login ticket and sending same to the cloud terminal, so that the cloud terminal sends the login ticket to a virtual machine, wherein the login account number is located in a local account number group of the virtual machine; sending the login account number and the login password to the virtual machine, or sending the login password to the virtual machine, so that the virtual machine updates the password of the login account number in the local account number group to the login password; and receiving a login ticket authentication request sent by the virtual machine, and returning the login account number and the login password to the virtual machine, so that the virtual machine automatically completes local login. Also disclosed is a desktop management device. By means of the present invention, the security of a desktop cloud system can be improved, and the convenience of single login can be ensured.

Description

Login method and desktop management device

The present application claims priority to Chinese Patent Application No. 201310690626.5, entitled "A Logging Method and Desktop Management Device", filed on December 17, 2013, the entire contents of in.

Technical field

The present invention relates to the field of communications technologies, and in particular, to a login method and a desktop management device.

Background technique

In the International Business Machines Corporation (IBM) Cloud Business Smart Business Cloud (SBDC), the definition of the desktop cloud is: through the thin client or any other network connected device To access cross-platform applications, as well as the entire customer desktop. As can be seen from this definition, the desktop cloud system requires a terminal to connect through the network, so that users get the same user experience as traditional desktop systems and applications, and this user experience is not limited to specific operating systems and applications. . That is to say, the user only needs a thin client device, or any other device that can connect to the network, through a dedicated program or browser, can access the personal desktop and various applications residing on the server side, and the user experience and peacetime use the tradition The personal computer is exactly the same. When a user logs in to the desktop cloud system for authentication, the authentication methods are various. For example, single sign-on with domain account password, single sign-on and non-single sign-on for smart card, or domain account password combined with dynamic password login. Among them, in terms of cost and ease of use, the cheapest and most widely used access authentication method is still a single sign-on method based on domain account password.

In the prior art, most desktop cloud vendors only support Microsoft's Active Directory (AD) domain control server for user management and authentication. However, for some applications with high security requirements, such as Non-US military, government, research institutes, etc., using AD domain control server may have a series of security risks such as data leakage, and other non-AD management authentication servers, two sets of accounts are required to log in to the desktop management device and log in to the virtual machine. The password is more complicated.

Summary of the invention

The technical problem to be solved by the embodiments of the present invention is to provide a login method and a desktop management device. To improve the security of the desktop cloud system and ensure the convenience of single sign-on.

A first aspect of the embodiments of the present invention provides a login method, which may include:

The desktop management device receives the login request of the cloud terminal, and performs identity authentication on the non-AD management authentication server.

If the authentication is passed, the login account and the login password for the single sign-on are saved, the virtual machine selected message sent by the cloud terminal is received, the login ticket is generated according to the login account and the login password, and the login ticket is sent to the login ticket. The cloud terminal, so that the cloud terminal sends the login ticket to a selected virtual machine, where the login account is located in a local account group of the virtual machine;

Sending, by the desktop management device, the login account and the login password to the virtual machine or sending the login password to the virtual machine, so that the virtual machine updates the password of the login account in the local account group. For the login password;

Receiving, by the desktop management device, a login ticket authentication request sent by the virtual machine, and if the authentication is passed, returning the login account and the login password to the virtual machine, so that the virtual machine automatically uses the login account and login The password completes the local login.

In a first possible implementation manner of the first aspect, the login account is a registered account that is registered by the cloud terminal in the non-AD management authentication server, and the login password is that the cloud terminal is in the non-AD The registration password registered with the registration account registered by the authentication server is managed.

In a second possible implementation manner of the first aspect, the login account is a registered account that is registered by the cloud terminal in the non-AD management authentication server, and the login password is that the desktop management device is configured according to the The random password generated by the account.

In a third possible implementation manner of the first aspect, the login account is a unique administrator account in the virtual machine local account group, and the login password is generated by the desktop management device according to the administrator account. random code.

In a fourth possible implementation manner of the first aspect, the login account is the cloud terminal The associated account of the registered account registered by the non-AD management authentication server, the login password is a random password generated by the desktop management device according to the associated account.

In conjunction with the first aspect or the first or second or third or fourth possible implementation of the first aspect, in a fifth possible implementation, the desktop management device saves the login account and login When the password is used, the encryption method is used.

In conjunction with the fifth possible implementation of the first aspect, in a sixth possible implementation, the desktop management device configures an expiration date for the login account, the login password, and the login ticket.

In conjunction with the first or second or fourth possible implementation of the first aspect, in a seventh possible implementation, the login account is sent by the desktop management device to a local account group of the virtual machine in.

A second aspect of the embodiments of the present invention provides a desktop management device, which may include:

a receiving unit, configured to receive a login request of the cloud terminal, and perform identity authentication on the non-AD management authentication server;

a generating unit, configured to save a login account and a login password for single sign-on, receive a virtual machine selected message sent by the cloud terminal, generate a login ticket according to the login account and a login password, and if Sending the login ticket to the cloud terminal, so that the cloud terminal sends the login ticket to the selected virtual machine, where the login account is located in a local account group of the virtual machine;

a sending unit, configured to send the login account and a login password to the virtual machine or send the login password to the virtual machine, so that the virtual machine updates a password of a login account in a local account group For the login password;

An authentication unit, configured to receive a login ticket authentication request sent by the virtual machine, and if the authentication is passed, return the login account and the login password to the virtual machine, so that the virtual machine automatically uses the login account and login The password completes the local login.

In a first possible implementation manner of the second aspect, the login account is a registered account that is registered by the cloud terminal in the non-AD management authentication server, and the login password is that the cloud terminal is in the non-AD The registration password registered with the registration account registered by the authentication server is managed.

In a second possible implementation manner of the second aspect, the login account is a registered account that is registered by the cloud terminal in the non-AD management authentication server, and the login password is the desktop The random password generated by the management device according to the registered account.

In a third possible implementation manner of the second aspect, the login account is a unique administrator account in the virtual machine local account group, and the login password is generated by the desktop management device according to the administrator account. random code.

In a fourth possible implementation manner of the second aspect, the login account is an associated account of the registered account registered by the cloud terminal in the non-AD management authentication server, and the login password is the desktop management device according to the desktop management device. The random password generated by the associated account.

In combination with the second aspect or the first or second or third or fourth possible implementation of the second aspect, in a fifth possible implementation, the generating unit is further configured to save the login account And when the password is logged in, the encryption method is used.

In conjunction with the fifth possible implementation of the second aspect, in a sixth possible implementation, the generating unit is further configured to configure an expiration date for the login account, the login password, and the login ticket.

With reference to the first or second or the fourth possible implementation of the second aspect, in a seventh possible implementation, the login account is sent by the sending unit to a local account group of the virtual machine. .

Embodiments of the present invention have the following beneficial effects:

By replacing the AD domain controller with a non-AD management authentication server, users can log in to the VM to log in to the VM without authentication to the non-AD management authentication server. This improves the security of the desktop cloud system. The device saves the login account in the local account group of the VM and updates the password of the account to the login password before logging in to the VM. The user does not need to enter another account password to log in again on the VM to ensure the desktop cloud system. The convenience of single sign-on.

DRAWINGS

In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the embodiments or the description of the prior art will be briefly described below. Obviously, the drawings in the following description are only It is a certain embodiment of the present invention, and other drawings can be obtained from those skilled in the art without any creative work.

1 is a schematic flow chart of a first embodiment of a login method of the present invention;

2 is a schematic flow chart of a second embodiment of the login method of the present invention;

3 is a schematic flow chart of a third embodiment of the login method of the present invention;

4 is a schematic flow chart of a fourth embodiment of the login method of the present invention;

FIG. 5 is a schematic flowchart diagram of a fifth embodiment of the login method of the present invention; FIG.

6 is a schematic structural diagram of a first embodiment of a desktop management device of the present invention;

7 is a schematic diagram showing the composition of a second embodiment of the desktop management device of the present invention.

detailed description

The technical solutions in the embodiments of the present invention are clearly and completely described in the following with reference to the accompanying drawings in the embodiments of the present invention. It is obvious that the described embodiments are only a part of the embodiments of the present invention, but not all embodiments. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

In the prior art, the cloud terminal registers with the AD domain control server and logs in to the desktop management device by using the registered account password. The desktop management device finally uses the registered account password when the account password is authenticated by the AD domain control server. The virtual machine selected by the cloud terminal is automatically logged in, and the virtual machine uses the account password to authenticate to the AD domain control server, thereby implementing single sign-on of the desktop cloud system. The entire process requires only one set of account passwords. However, the US AD domain controller server is used as the user management and authentication server. When logging in to the desktop management device and logging in to the VM, you need to authenticate to the AD domain controller. This may exist for some applications with high security requirements. A series of security risks, such as data leakage, and other non-AD management authentication servers. When the login VM is no longer authenticated by the non-AD management authentication server, you need to manually enter the local account password on the VM side to complete the local authentication of the VM. In this way, two sets of account passwords are required to log in to the desktop management device and log in to the virtual machine, which is cumbersome. In order to solve the security problem and implement single sign-on, in the following embodiments, the AD domain controller server will be replaced with a non-AD management authentication server. details as follows:

1 is a schematic flowchart of a first embodiment of a login method according to the present invention. In this embodiment, the method includes the following steps:

S101. The desktop management device receives the login request of the cloud terminal, and performs identity authentication on the non-AD management authentication server.

Specifically, the account and password used when the cloud terminal logs in are the registered account registered with the non-AD management authentication server and the corresponding registration password. The non-AD management authentication server may be a Lightweight Directory Access Protocol (LDAP) server or a database server. It only needs to complete the login authentication of the desktop management device. The login of the virtual machine can be logged in locally without having to authenticate to the non-AD management authentication server, thus improving the security of the desktop cloud system. And when the non-AD management authentication server is an LDAP server, the interface that the desktop management device interacts with the non-AD management authentication server is adapted according to an interface of the LDAP server, when the non-AD management authentication server is a database server. The interface that the desktop management device interacts with the non-AD management authentication server is adapted according to an interface of the database server.

S102. If the non-AD management authentication server passes the authentication, the desktop management device saves the login account and the login password for the single sign-on, and receives the virtual machine selected message sent by the cloud terminal, according to the login account. And generating a login ticket with the login password and transmitting the login ticket to the cloud terminal, so that the cloud terminal sends the login ticket to the selected virtual machine.

The login account is located in a local account group of the virtual machine.

The desktop management device may adopt an encryption save mode when saving the login account and the login password. Thereby improving the security of the login. And the desktop management device configures an expiration date for the login account, the login password, and the login ticket. When the expiration date is reached, the login account, the login password, and the login ticket are invalidated, which further improves the security of the login.

Specifically, the login account in the local account group of the virtual machine may be pre-sent to the local account group of the virtual machine by the desktop management device, or may be locally present in the virtual machine. Local account number in the account group.

Preferably, the login account may be a registered account registered by the cloud terminal in the non-AD management authentication server, and the login password may be registered by the cloud terminal with the non-AD management authentication server. The registration password for the account matching.

Alternatively, the login account may be a registered account registered by the cloud terminal in the non-AD management authentication server, and the login password may be the desktop management device according to the registration account. The random password generated by the number. Certainly, the login password may also be a registration password that is registered by the cloud terminal with the registered account in the non-AD management authentication server.

Alternatively, the login account may be a unique administrator account in the virtual machine local account group, and the login password may be a random password generated by the desktop management device according to the administrator account. Certainly, the login password may also be a registration password that is registered by the cloud terminal with the registered account in the non-AD management authentication server.

Alternatively, the login account may be an associated account of the registered account registered by the cloud terminal in the non-AD management authentication server, and the login password may be a random password generated by the desktop management device according to the associated account. Certainly, the login password may also be a registration password that is registered by the cloud terminal with the registered account in the non-AD management authentication server.

When the login account is a registered account or an associated account, the desktop management device may be sent to the local account group of the virtual machine.

When a random password is used, the security of the desktop cloud system can be further improved. Because the login password is a random password, the user cannot know the specific password composition, and therefore cannot be accessed by other methods such as remote access and virtual machine. You can log in to the VM directly, and you must log in to the desktop management device before the VM can obtain the generated random password and log in with a random password.

S103. The desktop management device sends the login account and a login password to the virtual machine or sends the login password to the virtual machine, so that the virtual machine sets a login account in a local account group. The password is updated to the login password.

By updating the password of the login account in the local account group to the virtual machine, even after the cloud terminal logs in to the desktop management device, the registration password on the non-AD management authentication server is changed, and on the virtual machine side, the password can still be changed. Single sign-on is achieved by matching the login password with the login account.

S104. The desktop management device receives a login ticket authentication request sent by the virtual machine, and if the desktop management device passes the verification, returns the login account and the login password to the virtual machine, so that the virtual machine is automatically Use the login account and login password to complete the local login.

In this embodiment, by replacing the AD domain control server with the non-AD management authentication server, the user can log in to the virtual machine to perform local login without the need to authenticate to the non-AD management authentication server, thereby improving the security of the desktop cloud system. Sex; and saved by virtual desktop management device Log in to the account in the local account group, and update the password of the account to be the login password before logging in to the VM. The user does not need to enter another account password to log in again on the VM, thus ensuring single sign-on of the desktop cloud system. Convenience.

The single sign-on of the desktop cloud system using various login accounts and login passwords will be described below with reference to FIGS. 2 to 5.

2 is a schematic flowchart of a second embodiment of a login method according to the present invention. In this embodiment, the method includes the following steps:

S201. The desktop management device joins the registered account registered in the non-AD management authentication server to the virtual machine local account group.

S202. The cloud terminal sends the login request to the desktop management device by using the registration account and the registration password registered by the non-AD management authentication server.

S203. The desktop management device performs identity authentication on the non-AD server.

S204: The authentication is passed, and the desktop management device saves the registered account and the registration password.

S205. The desktop management device sends the virtual machine list to the cloud terminal.

S206. The cloud terminal sends a virtual machine selected message to the desktop management device.

S207. The desktop management device generates a login ticket according to the registered account and the registration password, and sends the login ticket to the cloud terminal.

S208: The desktop management device sends the registration account and the registration password to the virtual machine.

S209. The virtual machine updates the password of the registered account in the local account group as the registration password.

S210. The cloud terminal sends the login ticket to the virtual machine.

S211. The virtual machine sends a login ticket authentication request to the desktop management device.

S212: After the authentication is passed, the desktop management device returns the registered account and the registration password to the virtual machine.

S213, the virtual machine automatically completes the local login by using the registered account and the registered password.

In this embodiment, the registration account registered with the non-AD management authentication server and the registration password are used to complete the single login of the virtual machine and the single sign-on of the desktop cloud system, without introducing other accounts and passwords, and the changes are small. It is easy to implement and will not bring any other burdens and impacts on the system.

3 is a schematic flowchart of a third embodiment of a login method according to the present invention. In this embodiment, the method includes the following steps:

S301. The desktop management device joins the registered account registered in the non-AD management authentication server to the virtual machine local account group.

S302. The cloud terminal sends a login request by using a registration account and a registration password registered by the non-AD management authentication server.

S303. The desktop management device performs identity authentication on the non-AD management authentication server.

S304: The authentication is passed, and the desktop management device saves the registered account and the generated random password.

S305. The desktop management device sends the virtual machine list to the cloud terminal.

S306. The cloud terminal sends a virtual machine selected message to the desktop management device.

S307. The desktop management device generates a login ticket according to the registered account and the random password, and sends the login ticket to the cloud terminal.

S308. The desktop management device sends the registered account and the random password to the virtual machine.

S309. The password of the registered account in the virtual machine update local account group is a random password.

S310. The cloud terminal sends the login ticket to the virtual machine.

S311: The virtual machine sends a login ticket authentication request to the desktop management device.

S312: After the authentication is passed, the desktop management device returns the registered account and the random password to the virtual machine.

S313: The virtual machine automatically completes the local login by using the registered account and the random password.

In this embodiment, the matching of the generated random password and the registered account is used to ensure that the user cannot log in to the virtual machine by other means, thereby further improving the security of the login, and when the password on the non-AD authentication server is changed, as long as the user A successfully logged-in desktop management device can still log in locally to the virtual machine.

Referring to FIG. 4, it is a schematic flowchart of a fourth embodiment of a login method according to the present invention. In this embodiment, the method includes the following steps:

S401. The cloud terminal sends a login request by using a registered account and a registration password registered by the non-AD management authentication server.

S402. The desktop management device performs identity authentication on the non-AD management authentication server.

S403: After the authentication is passed, the desktop management device saves the unique administrator account of the virtual machine and the generated random password.

S404. The desktop management device sends the virtual machine list to the cloud terminal.

S405. The cloud terminal sends a virtual machine selected message to the desktop management device.

S406. The desktop management device generates a login ticket according to an administrator account and a random password, and sends the login ticket to the cloud terminal.

S407. The desktop management device sends a random password to the virtual machine.

S408. The password of the virtual machine update administrator account is a random password.

S409. The cloud terminal sends the login ticket to the virtual machine.

S410. The virtual machine sends a login ticket authentication request to the desktop management device.

S411, the authentication is passed, and the desktop management device returns a random password to the virtual machine.

In S412, the virtual machine automatically completes the local login by using an administrator account and a random password.

In this embodiment, the administrator account in the virtual machine is directly used as the login account, and the login account is not required to be sent to the local account group of the virtual machine, which simplifies the process and improves the efficiency.

5 is a schematic flowchart of a fifth embodiment of a login method according to the present invention. In this embodiment, the method includes the following steps:

S501. The desktop management device adds the associated account of the registered account registered by the non-AD management authentication server to the virtual machine local account group.

S502. The cloud terminal sends a login request by using a registration account and a registration password registered by the non-AD management authentication server.

S503. The desktop management device performs identity authentication on the non-AD management authentication server.

S504: The authentication is passed, and the desktop management device saves the associated account and the generated random password.

S505. The desktop management device sends the virtual machine list to the cloud terminal.

S506. The cloud terminal sends a virtual machine selected message to the desktop management device.

S507. The desktop management device generates a login ticket according to the associated account and the random password, and sends the login ticket to the cloud terminal.

S508. The desktop management device sends the associated account and the random password to the virtual machine.

S509: The virtual machine updates the password of the associated account in the local account group to a random password.

S510: The cloud terminal sends the login ticket to the virtual machine.

S511. The virtual machine sends a login ticket authentication request to the desktop management device.

S512: After the authentication is passed, the desktop management device returns the associated account and the random password to the virtual machine.

In S513, the virtual machine automatically completes the local login by using the associated account and a random password.

In this embodiment, the virtual account is implemented by using the associated account of the registered account and the random password. Local login, login account and login password are not available to the general user, which further improves the security and privacy of the login.

Referring to FIG. 6 , it is a schematic diagram of a composition of a first embodiment of a desktop management device according to the present invention. In this embodiment, the desktop management device includes:

The receiving unit 100 is configured to receive a login request of the cloud terminal, and perform identity authentication on the non-AD management authentication server.

The generating unit 200 is configured to: if the authentication is passed, save the login account and the login password for the single sign-on, receive the virtual machine selected message sent by the cloud terminal, generate the login ticket according to the login account and the login password, and Sending the login ticket to the cloud terminal, so that the cloud terminal sends the login ticket to the selected virtual machine, where the login account is located in a local account group of the virtual machine;

The sending unit 300 is configured to send the login account and the login password to the virtual machine or send the login password to the virtual machine, so that the virtual machine sets a password of the login account in the local account group. Updated to the login password;

The authentication unit 400 is configured to receive a login ticket authentication request sent by the virtual machine, and if the authentication is passed, return the login account and the login password to the virtual machine, so that the virtual machine automatically uses the login account and Login password to complete local login.

The login account is a registered account registered by the cloud terminal in the non-AD management authentication server, and the login password is a registration password that the cloud terminal registers with the non-AD management authentication server and matches the registered account. .

Or the login account is a registered account registered by the cloud terminal in the non-AD management authentication server, and the login password is a random password generated by the desktop management device according to the registered account.

Or the login account is a unique administrator account in the virtual machine local account group, and the login password is a random password generated by the desktop management device according to the administrator account.

Or the login account is an associated account of the registered account registered by the cloud terminal in the non-AD management authentication server, and the login password is a random password generated by the desktop management device according to the associated account.

The generating unit 200 is further configured to use adding when the login account and the login password are saved. Secret storage method.

The generating unit 200 is further configured to configure an expiration date for the login account, the login password, and the login ticket.

When the login account is the associated account of the registered account or the registered account, the login account is sent by the sending unit 300 to the local account group of the virtual machine.

In a specific implementation, the desktop management device may be configured with a virtual desktop management system for saving account passwords, generating and sending virtual machine lists, generating and sending login tickets, and additionally configuring an operation and maintenance management system. Used to manage the account password and add the account to be used to the virtual account's local account group.

It should be noted that the foregoing generating unit may be formed by the storage subunit and the generating subunit, or may exist independently, and the generating unit and/or the authentication unit in the foregoing desktop management device embodiment may be independent of the desktop management in the form of hardware. The processor of the device is separately set and can be in the form of a microprocessor; it can also be embedded in the processor of the desktop management device in hardware, or can be stored in the memory of the desktop management device in software, so as to facilitate The processor of the desktop management device invokes the operations corresponding to the above generating unit or the authentication unit.

For example, in the first embodiment of the desktop management device of the present invention (the embodiment shown in FIG. 6), the generating unit 200 and/or the authentication unit 400 may be a processor of the desktop management device, and the receiving unit 100 and the transmitting unit 300 The functionality can be embedded in the processor. Certainly, the receiving unit 100 and the sending unit 300 may be integrated or set independently. The receiving unit 100 and the sending unit 300 may be used as an interface circuit of the desktop management device, or may be integrated with the generating unit 200 or the authentication unit 400, or may be independently configured. . The embodiment of the invention does not impose any limitation. The above processor may be a central processing unit (CPU), a microprocessor, a single chip microcomputer, or the like.

7 is a schematic diagram of a composition of a second embodiment of a desktop management device according to the present invention. In this embodiment, the desktop management device includes: an interface circuit 500, a memory 600, and the interface circuit 500 and the memory 600. Connected processor 700. The memory 600 is used to store a set of program codes, and the processor 700 is configured to call the program code stored in the memory 600 to perform the operations described in any one of the first to fifth embodiments of the login method of the present invention.

It should be noted that each embodiment in this specification is described in a progressive manner, and each embodiment focuses on the differences from other embodiments, and the embodiments are the same. Similar parts can be seen from each other. For the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the description of the method embodiment.

Through the description of the above embodiments, the present invention has the following advantages:

One of ordinary skill in the art can understand that all or part of the process of implementing the foregoing embodiments can be completed by a computer program to instruct related hardware, and the program can be stored in a computer readable storage medium. When executed, the flow of an embodiment of the methods as described above may be included. The storage medium may be a magnetic disk, an optical disk, a read-only memory (ROM), or a random access memory (RAM).

The above is only the preferred embodiment of the present invention, and the scope of the present invention is not limited thereto, and thus equivalent changes made in the claims of the present invention are still within the scope of the present invention.

Claims

A login method, comprising:

The desktop management device receives the login request of the cloud terminal, and performs identity authentication on the inactive directory management authentication server;

If the inactive directory management authentication server is authenticated, the desktop management device saves a login account and a login password for single sign-on, and receives a virtual machine selected message sent by the cloud terminal, according to the login account and The login password generates a login ticket and sends the login ticket to the cloud terminal, so that the cloud terminal sends the login ticket to the selected virtual machine, where the login account is located locally of the virtual machine In the account group;

Sending, by the desktop management device, the login account and the login password to the virtual machine or sending the login password to the virtual machine, so that the virtual machine updates the password of the login account in the local account group. For the login password;

Receiving, by the desktop management device, a login ticket authentication request sent by the virtual machine, if the desktop management device passes the verification, returning the login account and the login password to the virtual machine, so that the virtual machine automatically uses the virtual machine The login account and login password are used to complete the local login.
The method according to claim 1, wherein the login account is a registered account registered by the cloud terminal in the non-AD management authentication server, and the login password is the cloud terminal in the non-AD management. The registration password registered by the authentication server that matches the registered account.
The method of claim 1, wherein the login account is a registered account registered by the cloud terminal in the non-AD management authentication server, and the login password is the desktop management device according to the registered account. Generated random password.
The method of claim 1, wherein the login account is a unique administrator account in the virtual machine local account group, and the login password is randomly generated by the desktop management device according to the administrator account. password.
The method of claim 1 wherein said login account is said cloud end An associated account of the registered account registered by the non-AD management authentication server, where the login password is a random password generated by the desktop management device according to the associated account.
The method according to any one of claims 1 to 5, wherein the inactive directory management authentication server is a lightweight directory access protocol server or a database server, and the desktop management device is used for the inactive The interface of the directory management authentication server interaction is adapted according to the interface of the inactive directory management authentication server. .
The method of claim 6 further comprising:

The desktop management device configures an expiration date for the login account, the login password, and the login ticket.
The method according to any one of claims 2, 3 or 5, wherein the login account is sent by the desktop management device to a local account group of the virtual machine.
A desktop management device, comprising:

a receiving unit, configured to receive a login request of the cloud terminal, and perform identity authentication to the inactive directory management authentication server;

a generating unit, configured to save a login account and a login password for single sign-on, and receive a virtual machine selected message sent by the cloud terminal, according to the login account and if the inactivity directory management authentication server passes the authentication The login password generates a login ticket and sends the login ticket to the cloud terminal, so that the cloud terminal sends the login ticket to the selected virtual machine, where the login account is located locally of the virtual machine In the account group;

a sending unit, configured to send the login account and a login password to the virtual machine or send the login password to the virtual machine, so that the virtual machine updates a password of a login account in a local account group For the login password;

An authentication unit, configured to receive a login ticket authentication request sent by the virtual machine, and if the authentication is passed, return the login account and the login password to the virtual machine, so that the virtual machine automatically uses the login account and login The password completes the local login.
The device according to claim 1, wherein the login account is a registered account registered by the cloud terminal in the non-AD management authentication server, and the login password is the cloud terminal in the non-AD management. The registration password registered by the authentication server that matches the registered account.
The device according to claim 1, wherein the login account is a registered account registered by the cloud terminal in the non-AD management authentication server, and the login password is the registered management account of the desktop management device. Generated random password.
The device according to claim 1, wherein the login account is a unique administrator account in the virtual machine local account group, and the login password is randomly generated by the desktop management device according to the administrator account. password.
The device according to claim 1, wherein the login account is an associated account of the registered account registered by the cloud terminal in the non-AD management authentication server, and the login password is the desktop management device according to the A random password generated by the associated account.
The device according to any one of claims 1 to 13, wherein the inactive directory management authentication server is a lightweight directory access protocol server or a database server, and the receiving unit is configured to use the inactive directory. The interface for managing the authentication server interaction is adapted according to the interface of the inactive directory management authentication server. .
The device according to claim 14, wherein the generating unit is further configured to configure an expiration date for the login account, the login password, and the login ticket.
The device according to any one of claims 10, 11 or 13, wherein the login account is sent by the sending unit to a local account group of the virtual machine.