Commit | Line | Data |
---|---|---|
ae147938 AC |
1 | #!/bin/sh -e |
2 | ||
3 | case $1 in | |
4 | adduser) | |
c773e9e4 AC |
5 | USERNAME=$2 |
6 | PASSWORD=$3 | |
216f7bc5 | 7 | |
c773e9e4 AC |
8 | kinit -k -t /etc/keytabs/root.admin.keytab root/admin |
9 | aklog | |
216f7bc5 | 10 | |
6ee7d8ef AC |
11 | if ! vos examine db.$USERNAME >/dev/null 2>/dev/null; then |
12 | vos create -server afs -partition a -name db.$USERNAME -maxquota 5000 | |
13 | fs mkmount -dir /afs/.hcoop.net/common/.databases/$USERNAME -vol db.$USERNAME -rw | |
14 | fs setacl -dir /afs/hcoop.net/common/databases/$USERNAME -acl databases l | |
15 | fs setacl -dir /afs/hcoop.net/common/databases/$USERNAME -acl system:backup rl | |
16 | fi | |
17 | ||
216f7bc5 | 18 | sudo -H mysql -e "CREATE USER '$USERNAME'@'localhost' IDENTIFIED BY '$PASSWORD';" |
ae147938 AC |
19 | ;; |
20 | createdb) | |
216f7bc5 AC |
21 | USERNAME=$2 |
22 | DBNAME_BASE=$3 | |
23 | DBNAME="${USERNAME}_${DBNAME_BASE}" | |
24 | DIR=/afs/hcoop.net/common/databases/$USERNAME/mysql | |
25 | ||
26 | kinit -k -t /etc/keytabs/root.admin.keytab root/admin | |
27 | aklog | |
28 | ||
29 | mkdir -p $DIR | |
30 | fs setacl -dir $DIR -acl mysql rlid | |
31 | fs setacl -dir $DIR -acl databases none | |
32 | fs setacl -dir $DIR -acl system:backup rl | |
6ee7d8ef | 33 | mkdir $DIR/$DBNAME |
216f7bc5 AC |
34 | chown mysql:mysql $DIR/$DBNAME |
35 | chmod 770 $DIR/$DBNAME | |
36 | ln -sf $DIR/$DBNAME /var/lib/mysql/$DBNAME | |
37 | fs setacl -dir $DIR/$DBNAME/ -acl mysql all | |
38 | ||
6ee7d8ef | 39 | sudo -H mysql -e "GRANT CREATE,SELECT,INSERT,UPDATE,DELETE,INDEX,ALTER,CREATE VIEW,SHOW VIEW,GRANT OPTION ON TABLE * TO '$USERNAME'@'localhost';" $DBNAME |
216f7bc5 | 40 | sudo -H mysql -e "FLUSH PRIVILEGES;" |
ae147938 AC |
41 | ;; |
42 | *) | |
216f7bc5 | 43 | echo "Usage: domtool-mysql [adduser <user> <password> | createdb <user> <table>]" |
ae147938 AC |
44 | ;; |
45 | esac |