You need domtool-admin rights to destroy a user

[hcoop/scripts.git] / destroy-user

diff --git a/destroy-user b/destroy-user
index 323487f..a8214ba 100755 (executable)
--- a/destroy-user
+++ b/destroy-user
@@ -3,6 +3,7 @@
 # MUST be executed:
 #  - on deleuze
 #  - as a user with an /etc/sudoers line
+#  - as a user with domtool-admin rights
 #  - while holding system:administrator tokens
 
 USER=$1
@@ -14,7 +15,6 @@ fi
 PATHBITS=`echo $USER | head -c 1`/`echo $USER | head -c 2`/$USER
 HOMEPATH=/afs/hcoop.net/user/$PATHBITS
 MAILPATH=/afs/hcoop.net/common/email/$PATHBITS
-DBPATH=/afs/.hcoop.net/common/.databases/$PATHBITS
 # We don't use separate partitions for logs
 #LOGSPATH=/afs/.hcoop.net/common/.logs/$USER
 
@@ -46,22 +46,32 @@ sudo nscd -i passwd
 sudo nscd -i group
 
 # Remove from databases
-sudo -u postgres psql -c "DROP TABLESPACE user_$USER"
+#sudo -u postgres psql -c "DROP TABLESPACE user_$USER"
 #sudo -u postgres psql -c "DROP USER $USER"
 #sudo -H mysql -e "DROP USER $USER@localhost"
 
+# Remove privs before rm
+fs sa $HOMEPATH -clear system:anyuser none
+fs sa $MAILPATH -clear system:anyuser none
+#XXX see what to do with db volume
+
 fs rm $MAILPATH
 fs rm $HOMEPATH
 #fs rm $LOGSPATH
-fs rm $DBPATH
+#fs rm $DBPATH
 fs rm /afs/.hcoop.net/old/user/$PATHBITS
 fs rm /afs/.hcoop.net/old/mail/$PATHBITS
+
+# Don't delete volumes, rename them.
 #vos remove deleuze.hcoop.net /vicepa user.$USER
 #vos remove deleuze.hcoop.net /vicepa mail.$USER
 #vos remove deleuze.hcoop.net /vicepa db.$USER
 #vos remove deleuze.hcoop.net /vicepa logs.$USER
+vos rename user.$USER user.$USER.d
+vos rename mail.$USER mail.$USER.d
+#XXX vos rename db.$USER db.$USER.d
 
-vos release common.databases
+#vos release common.databases
 #vos release common.logs
 
 sudo kadmin.local -q "delprinc -force $USER@HCOOP.NET"
@@ -78,8 +88,8 @@ pts delete $USER.daemon
 #fs rm /afs/hcoop.net/old/mail/$PATHBITS
 #fs rm /afs/hcoop.net/old/logs/$PATHBITS
 
-vos syncserv deleuze
-vos syncvldb deleuze
+vos syncserv fritz
+vos syncvldb fritz
 fs checkvolumes
 
 # Remove user from all of our mailing lists