apache-sync-logs: Use more restictive permissions for privacy
[hcoop/scripts.git] / destroy-user
1 #!/bin/bash
2
3 # MUST be executed:
4 # - on deleuze
5 # - as a user with an /etc/sudoers line
6 # - while holding system:administrator tokens
7
8 USER=$1
9
10 PATHBITS=`echo $USER | head -c 1`/`echo $USER | head -c 2`/$USER
11 HOMEPATH=/afs/hcoop.net/user/$PATHBITS
12 MAILPATH=/afs/hcoop.net/common/email/$PATHBITS
13 DBPATH=/afs/.hcoop.net/common/.databases/$PATHBITS
14 # We don't use separate partitions for logs
15 #LOGSPATH=/afs/.hcoop.net/common/.logs/$USER
16
17 sudo rm -f /etc/keytabs/mailfilter/$USER
18 sudo rm -f /etc/keytabs/cgi/$USER
19 sudo rm -f /etc/keytabs/user.daemon/$USER
20
21 # LDAP
22 sudo ldapdelete -v -x -D cn=admin,dc=hcoop,dc=net -y /etc/ldap.secret \
23 uid=$USER,ou=People,dc=hcoop,dc=net
24 sudo ldapdelete -v -x -D cn=admin,dc=hcoop,dc=net -y /etc/ldap.secret \
25 uid=$USER.cgi,ou=People,dc=hcoop,dc=net
26 sudo ldapdelete -v -x -D cn=admin,dc=hcoop,dc=net -y /etc/ldap.secret \
27 uid=$USER.mailfilter,ou=People,dc=hcoop,dc=net
28 sudo ldapdelete -v -x -D cn=admin,dc=hcoop,dc=net -y /etc/ldap.secret \
29 cn=$USER,ou=Group,dc=hcoop,dc=net
30 sudo ldapdelete -v -x -D cn=admin,dc=hcoop,dc=net -y /etc/ldap.secret \
31 cn=$USER.cgi,ou=Group,dc=hcoop,dc=net
32 sudo ldapdelete -v -x -D cn=admin,dc=hcoop,dc=net -y /etc/ldap.secret \
33 cn=$USER.mailfilter,ou=Group,dc=hcoop,dc=net
34 sudo ldapdelete -v -x -D cn=admin,dc=hcoop,dc=net -y /etc/ldap.secret \
35 cn=$USER.daemon,ou=Group,dc=hcoop,dc=net
36
37 # Invalidate nscd cache
38 sudo nscd -i passwd
39 sudo nscd -i group
40
41 # Remove from databases
42 sudo -u postgres psql -c "DROP TABLESPACE user_$USER"
43 #sudo -u postgres psql -c "DROP USER $USER"
44 #sudo -H mysql -e "DROP USER $USER@localhost"
45
46 fs rm $MAILPATH
47 fs rm $HOMEPATH
48 #fs rm $LOGSPATH
49 fs rm $DBPATH
50 fs rm /afs/hcoop.net/old/user/$PATHBITS
51 fs rm /afs/hcoop.net/old/mail/$PATHBITS
52 vos remove deleuze.hcoop.net /vicepa user.$USER
53 vos remove deleuze.hcoop.net /vicepa mail.$USER
54 vos remove deleuze.hcoop.net /vicepa db.$USER
55 #vos remove deleuze.hcoop.net /vicepa logs.$USER
56
57 vos release common.databases
58 #vos release common.logs
59
60 sudo kadmin.local -q "delprinc -force $USER@HCOOP.NET"
61 sudo kadmin.local -q "delprinc -force $USER/mailfilter@HCOOP.NET"
62 sudo kadmin.local -q "delprinc -force $USER/cgi@HCOOP.NET"
63 sudo kadmin.local -q "delprinc -force $USER/daemon@HCOOP.NET"
64
65 pts delete $USER
66 pts delete $USER.mailfilter
67 pts delete $USER.cgi
68 pts delete $USER.daemon
69
70 #fs rm /afs/hcoop.net/old/user/$PATHBITS
71 #fs rm /afs/hcoop.net/old/mail/$PATHBITS
72 #fs rm /afs/hcoop.net/old/logs/$PATHBITS
73
74 vos syncserv deleuze
75 vos syncvldb deleuze
76 fs checkvolumes
77