src/plugins/domtool-mysql

   1 #!/bin/sh -e
   2
   3 case $1 in
   4         adduser)
   5                 USERNAME=$2
   6                 PASSWORD=$3
   7
   8                 kinit -k -t /etc/keytabs/root.admin.keytab root/admin
   9                 aklog
  10
  11                 if ! vos examine db.$USERNAME >/dev/null 2>/dev/null; then
  12                         vos create -server afs -partition a -name db.$USERNAME -maxquota 5000
  13                         fs mkmount -dir /afs/.hcoop.net/common/.databases/$USERNAME -vol db.$USERNAME -rw
  14                         vos release common.databases
  15                         fs setacl -dir /afs/hcoop.net/common/databases/$USERNAME -acl databases l
  16                         fs setacl -dir /afs/hcoop.net/common/databases/$USERNAME -acl system:backup rl
  17                 fi
  18
  19                 sudo -H mysql -e "CREATE USER '$USERNAME'@'localhost' IDENTIFIED BY '$PASSWORD';"
  20         ;;
  21         passwd)
  22                 USERNAME=$2
  23                 PASSWORD=$3
  24
  25                 sudo -H mysql -e "SET PASSWORD FOR '$USERNAME'@'localhost' = PASSWORD('$PASSWORD');"
  26         ;;
  27         createdb)
  28                 USERNAME=$2
  29                 DBNAME_BASE=$3
  30                 DBNAME="${USERNAME}_${DBNAME_BASE}"
  31                 DIR=/afs/hcoop.net/common/databases/$USERNAME/mysql
  32
  33                 kinit -k -t /etc/keytabs/root.admin.keytab root/admin
  34                 aklog
  35
  36                 mkdir -p $DIR
  37                 fs setacl -dir $DIR -acl mysql rlid
  38                 fs setacl -dir $DIR -acl databases none
  39                 fs setacl -dir $DIR -acl system:backup rl
  40                 mkdir $DIR/$DBNAME
  41                 chown mysql:mysql $DIR/$DBNAME
  42                 chmod 770 $DIR/$DBNAME
  43                 ln -sf $DIR/$DBNAME /var/lib/mysql/$DBNAME
  44                 fs setacl -dir $DIR/$DBNAME/ -acl mysql all
  45
  46                 sudo -H mysql -e "GRANT CREATE,SELECT,INSERT,UPDATE,DELETE,INDEX,ALTER,CREATE VIEW,SHOW VIEW,GRANT OPTION ON TABLE * TO '$USERNAME'@'localhost';" $DBNAME
  47                 sudo -H mysql -e "FLUSH PRIVILEGES;"
  48         ;;
  49         *)
  50                 echo "Usage: domtool-mysql [adduser <user> <password> | passwd <user> <password> | createdb <user> <table>]"
  51         ;;
  52 esac