X-Git-Url: https://git.hcoop.net/hcoop/domtool2.git/blobdiff_plain/ae1479386628436613a664b6601f6ca833dd6b2d..86aa5de7d9f2754d50489432ffaa43cba3fa170f:/src/plugins/domtool-mysql

diff --git a/src/plugins/domtool-mysql b/src/plugins/domtool-mysql
dissimilarity index 71%
index 9d02fc4..d2c5298 100755
--- a/src/plugins/domtool-mysql
+++ b/src/plugins/domtool-mysql
@@ -1,13 +1,51 @@
-#!/bin/sh -e
-
-case $1 in
-	adduser)
-		echo "I would create MySQL user $2."
-	;;
-	createdb)
-		echo "I would create MySQL table $2_$3 for user $2."
-	;;
-	*)
-		echo "Usage: domtool-mysql [adduser <user> | createdb <user> <table>]"
-	;;
-esac
+#!/bin/sh -e
+
+case $1 in
+	adduser)
+		USERNAME=$2
+		PASSWORD=$3
+
+		kinit -k -t /etc/keytabs/root.admin.keytab root/admin
+		aklog
+
+		if ! vos examine db.$USERNAME >/dev/null 2>/dev/null; then
+			vos create -server afs -partition a -name db.$USERNAME -maxquota 5000
+			fs mkmount -dir /afs/.hcoop.net/common/.databases/$USERNAME -vol db.$USERNAME -rw
+			fs setacl -dir /afs/hcoop.net/common/databases/$USERNAME -acl databases l
+			fs setacl -dir /afs/hcoop.net/common/databases/$USERNAME -acl system:backup rl
+		fi
+
+		sudo -H mysql -e "CREATE USER '$USERNAME'@'localhost' IDENTIFIED BY '$PASSWORD';"
+	;;
+	passwd)
+		USERNAME=$2
+		PASSWORD=$3
+
+		sudo -H mysql -e "SET PASSWORD FOR '$USERNAME'@'localhost' = PASSWORD('$PASSWORD');"
+	;;
+	createdb)
+		USERNAME=$2
+		DBNAME_BASE=$3
+		DBNAME="${USERNAME}_${DBNAME_BASE}"
+		DIR=/afs/hcoop.net/common/databases/$USERNAME/mysql
+
+		kinit -k -t /etc/keytabs/root.admin.keytab root/admin
+		aklog
+
+		mkdir -p $DIR
+		fs setacl -dir $DIR -acl mysql rlid
+		fs setacl -dir $DIR -acl databases none
+		fs setacl -dir $DIR -acl system:backup rl
+		mkdir $DIR/$DBNAME
+		chown mysql:mysql $DIR/$DBNAME
+		chmod 770 $DIR/$DBNAME
+		ln -sf $DIR/$DBNAME /var/lib/mysql/$DBNAME
+		fs setacl -dir $DIR/$DBNAME/ -acl mysql all
+
+		sudo -H mysql -e "GRANT CREATE,SELECT,INSERT,UPDATE,DELETE,INDEX,ALTER,CREATE VIEW,SHOW VIEW,GRANT OPTION ON TABLE * TO '$USERNAME'@'localhost';" $DBNAME
+		sudo -H mysql -e "FLUSH PRIVILEGES;"
+	;;
+	*)
+		echo "Usage: domtool-mysql [adduser <user> <password> | passwd <user> <password> | createdb <user> <table>]"
+	;;
+esac