699 lines
18 KiB
Bash
Executable File
699 lines
18 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
|
|
working_dir="$(dirname $(realpath $0))"
|
|
log_dir="${working_dir}/log"
|
|
|
|
conf_file="${working_dir}/conf/mysql_credetials.conf"
|
|
|
|
tmp_log_file="$(mktemp)"
|
|
|
|
# -------------
|
|
# - Variable settings
|
|
# -------------
|
|
|
|
MYSQL_CREDENTIALS_GIVEN=false
|
|
|
|
DATABASE_USER=""
|
|
DATABASE_PASSWD=""
|
|
DATABASE_USER_NEEDED=true
|
|
DATABASE_PASSWD_NEEDED=true
|
|
QUIET_MODE=false
|
|
NON_INTERACTIVE_MODE=false
|
|
|
|
|
|
# -------------
|
|
# --- Some functions
|
|
# -------------
|
|
|
|
usage() {
|
|
echo
|
|
[ -n "$1" ] && echo -e "Error: $1\n"
|
|
|
|
cat<<EOF
|
|
|
|
Usage: $(basename $0) [Options]
|
|
|
|
Script grants full access to user for all database.
|
|
|
|
|
|
|
|
Options:
|
|
|
|
|
|
-I
|
|
Non-interactive mode. Script will act in non-interactice mode. At least the
|
|
database name must be given using parameter '-d'. Default is acting in
|
|
interactive mode
|
|
|
|
-p <db-passwd>
|
|
Password for the given user. If not set, script looks for a file named
|
|
'databases/<db-name>'. If found, script reads database password from that file.
|
|
If not running in quiet mode, you will be asked to confirm or set the db-user.
|
|
-q
|
|
Be quiet. Setting this parameter implies non-interactive mode (parameter -I). So
|
|
if '-q' is set, at least the database name must be given using parameter '-d'.
|
|
|
|
-u <db-user>
|
|
The name of the database user who will be granted full access to the given
|
|
database. If not set, script looks for a file 'databases/<db-name>'. If
|
|
found, script reads database settings (user/password) from that file. If not
|
|
running in quiet mode, you will be asked to confirm or set the db-user.
|
|
|
|
EOF
|
|
clean_up 1
|
|
}
|
|
|
|
|
|
clean_up() {
|
|
|
|
# Perform program exit housekeeping
|
|
rm -f $tmp_log_file
|
|
exit $1
|
|
}
|
|
|
|
fatal(){
|
|
echo ""
|
|
if $terminal ; then
|
|
if [[ -n "$*" ]] ; then
|
|
echo -e " [ \033[31m\033[1mFatal\033[m ]: $*"
|
|
else
|
|
echo " \033[31m\033[1mFatal error\033[m:"
|
|
fi
|
|
echo ""
|
|
echo -e " \033[31m\033[1mScript will be interrupted.\033[m\033[m"
|
|
else
|
|
if [[ -n "$*" ]] ; then
|
|
echo " [ Fatal ]: $*"
|
|
else
|
|
echo " Fatal error:"
|
|
fi
|
|
echo ""
|
|
echo " Script was terminated...."
|
|
fi
|
|
echo ""
|
|
clean_up 1
|
|
}
|
|
|
|
echononl(){
|
|
if $terminal && ! $QUIET_MODE ; then
|
|
echo X\\c > /tmp/shprompt$$
|
|
if [ `wc -c /tmp/shprompt$$ | awk '{print $1}'` -eq 1 ]; then
|
|
echo -e -n "$*\\c" 1>&2
|
|
else
|
|
echo -e -n "$*" 1>&2
|
|
fi
|
|
rm /tmp/shprompt$$
|
|
fi
|
|
}
|
|
|
|
error(){
|
|
echo ""
|
|
if $terminal ; then
|
|
echo -e " [ \033[31m\033[1mError\033[m ]: $*"
|
|
else
|
|
echo "Error: $*"
|
|
fi
|
|
echo ""
|
|
}
|
|
|
|
warn (){
|
|
if $terminal && ! $QUIET_MODE ; then
|
|
echo ""
|
|
echo -e " [ \033[33m\033[1mWarning\033[m ]: $*"
|
|
echo ""
|
|
fi
|
|
}
|
|
|
|
info (){
|
|
if $terminal && ! $QUIET_MODE ; then
|
|
echo ""
|
|
echo -e " [ \033[32m\033[1mInfo\033[m ]: $*"
|
|
echo ""
|
|
fi
|
|
}
|
|
|
|
echo_ok() {
|
|
if $terminal && ! $QUIET_MODE ; then
|
|
echo -e "\033[80G[ \033[32mok\033[m ]"
|
|
fi
|
|
}
|
|
echo_failed(){
|
|
if $terminal && ! $QUIET_MODE ; then
|
|
echo -e "\033[80G[ \033[1;31mfailed\033[m ]"
|
|
fi
|
|
}
|
|
echo_skipped() {
|
|
if $terminal && ! $QUIET_MODE ; then
|
|
echo -e "\033[80G[ \033[37mskipped\033[m ]"
|
|
fi
|
|
}
|
|
|
|
is_number() {
|
|
|
|
return $(test ! -z "${1##*[!0-9]*}" > /dev/null 2>&1);
|
|
|
|
# - also possible
|
|
# -
|
|
#[[ ! -z "${1##*[!0-9]*}" ]] && return 0 || return 1
|
|
#return $([[ ! -z "${1##*[!0-9]*}" ]])
|
|
}
|
|
|
|
detect_mysql_version () {
|
|
|
|
_MYSQLD_VERSION="$(mysqld -V 2>/dev/null)"
|
|
|
|
if [[ -z "$_MYSQLD_VERSION" ]]; then
|
|
fatal "No installed MySQL server or distribution found!"
|
|
elif [[ -d "/usr/local/mysql" ]] && [[ "$(basename "$(realpath "/usr/local/mysql")")" =~ percona- ]]; then
|
|
MYSQL_CUR_DISTRIBUTION="Percona"
|
|
elif [[ "$_MYSQLD_VERSION" =~ MariaDB ]]; then
|
|
MYSQL_CUR_DISTRIBUTION="MariaDB"
|
|
elif [[ "$_MYSQLD_VERSION" =~ MySQL ]]; then
|
|
MYSQL_CUR_DISTRIBUTION="MySQL"
|
|
elif [[ -d "/usr/local/mysql" ]] && [[ "$(basename "$(realpath "/usr/local/mysql")")" =~ mysql- ]]; then
|
|
MYSQL_CUR_DISTRIBUTION="MySQL"
|
|
elif [[ -d "/usr/local/mysql" ]] && [[ "$(basename "$(realpath "/usr/local/mysql")")" =~ mariadb- ]]; then
|
|
MYSQL_CUR_DISTRIBUTION="MariaDB"
|
|
else
|
|
error "MySQL Instalation found, but cannot determin the distribution!"
|
|
|
|
MYSQL_CUR_DISTRIBUTION=
|
|
echo ""
|
|
echo " Select the MySQL distribution to install."
|
|
echo ""
|
|
echo " [1] MySQL (the original community edition)"
|
|
echo " [2] Percona Server for MySQL"
|
|
echo " [3] MariaDB"
|
|
echo ""
|
|
echononl " Eingabe [1/2/3]: "
|
|
|
|
while [ "$MYSQL_CUR_DISTRIBUTION" != "MySQL" -a "$MYSQL_CUR_DISTRIBUTION" != "MariaDB" -a "$MYSQL_CUR_DISTRIBUTION" != "Percona" ];do
|
|
read OPTION
|
|
case $OPTION in
|
|
1) MYSQL_CUR_DISTRIBUTION="MySQL"
|
|
;;
|
|
2) MYSQL_CUR_DISTRIBUTION="Percona"
|
|
;;
|
|
3) MYSQL_CUR_DISTRIBUTION="MariaDB"
|
|
;;
|
|
*) echo ""
|
|
echo -e "\tFalsche Eingabe ! [ 1 = MySQL ; 2 = Percona ; 3 = MariaDB ]"
|
|
echo ""
|
|
echononl " Eingabe:"
|
|
;;
|
|
esac
|
|
done
|
|
fi
|
|
|
|
MYSQL_VERSION="$(echo $_MYSQLD_VERSION | grep -o -E "[0-9]+\.[0-9]+\.[0-9]+(-[0-9]+)?" | head -n 1)"
|
|
MYSQL_MAJOR_VERSION="$(echo $MYSQL_VERSION | cut -d '.' -f1)"
|
|
MYSQL_MINOR_VERSION="$(echo $MYSQL_VERSION | cut -d '.' -f2)"
|
|
MYSQL_PATCH_LEVEL="$(echo $MYSQL_VERSION | cut -d '.' -f3)"
|
|
MYSQL_MAIN_VERSION="$(echo $MYSQL_VERSION | cut -d '.' -f1,2)"
|
|
|
|
}
|
|
|
|
detect_mysql_version
|
|
|
|
if ( ! [[ "$MYSQL_CUR_DISTRIBUTION" = "MariaDB" ]] && ([[ $MYSQL_MAJOR_VERSION -gt 10 ]] \
|
|
|| ( [[ $MYSQL_MAJOR_VERSION -eq 10 ]] && [[ $MYSQL_MINOR_VERSION -gt 3 ]] )) ); then
|
|
fatal "only available for MariaDB Version > 3"
|
|
fi
|
|
|
|
trap clean_up SIGHUP SIGINT SIGTERM
|
|
|
|
|
|
|
|
|
|
# -------------
|
|
# - Read Commandline Parameters
|
|
# -------------
|
|
|
|
while getopts d:hIp:qu: opt ; do
|
|
case $opt in
|
|
I) NON_INTERACTIVE_MODE=true
|
|
;;
|
|
p) DATABASE_PASSWD="$OPTARG"
|
|
DATABASE_PASSWD_NEEDED=false
|
|
;;
|
|
q) QUIET_MODE=true
|
|
NON_INTERACTIVE_MODE=true
|
|
;;
|
|
u) DATABASE_USER="$OPTARG"
|
|
DATABASE_USER_NEEDED=false
|
|
;;
|
|
h) usage
|
|
;;
|
|
*) usage
|
|
esac
|
|
done
|
|
|
|
shift $(expr $OPTIND - 1)
|
|
[[ "$#" -gt 0 ]] && usage "Wrong number of arguments given!"
|
|
|
|
# - If not running in a terminal, be silent and non-interactive
|
|
# -
|
|
if [[ -t 1 ]] ; then
|
|
terminal=true
|
|
else
|
|
terminal=false
|
|
QUIET_MODE=true
|
|
NON_INTERACTIVE_MODE=true
|
|
fi
|
|
|
|
|
|
|
|
# - Clear Screen
|
|
# -
|
|
clear
|
|
|
|
|
|
# -------------
|
|
# - Load Settings from configuration file mysql_credetials.conf
|
|
# -------------
|
|
|
|
if ! $QUIET_MODE ; then
|
|
echo ""
|
|
fi
|
|
echononl " Loading configuration settings from $(basename ${conf_file}).."
|
|
if [[ -f "$conf_file" ]]; then
|
|
source "$conf_file" > $tmp_log_file 2>&1
|
|
if [[ $? -eq 0 ]]; then
|
|
echo_ok
|
|
else
|
|
echo_failed
|
|
fatal "$(cat $tmp_log_file)"
|
|
fi
|
|
else
|
|
echo_skipped
|
|
warn "No Configuration File found. Loading defaults.."
|
|
fi
|
|
|
|
if [[ -n "$mysql_credential_args" ]]; then
|
|
MYSQL_CREDENTIAL_ARGS="$mysql_credential_args"
|
|
MYSQL_CREDENTIALS_GIVEN=true
|
|
fi
|
|
|
|
|
|
if ! $NON_INTERACTIVE_MODE ; then
|
|
|
|
declare -i index_arr=0
|
|
|
|
# - Get MySQL Version
|
|
# -
|
|
if [[ ${#mysql_credential_args_arr[@]} -gt 0 ]] ; then
|
|
|
|
echo ""
|
|
echo -e "\033[32m--\033[m"
|
|
echo ""
|
|
echo "Which Installation should be used for database creation?"
|
|
echo ""
|
|
echo ""
|
|
|
|
declare -a _tmp_arr=()
|
|
#for _val in ${mysql_credential_args_arr[@]} ; do
|
|
while [[ $index_arr -lt ${#mysql_credential_args_arr[@]} ]] ; do
|
|
|
|
#IFS=':' read -a _val_arr <<< "${_val}"
|
|
IFS=':' read -a _val_arr <<< "${mysql_credential_args_arr[$index_arr]}"
|
|
|
|
mysql_version="${_val_arr[0]}"
|
|
mysql_credential_args="${_val_arr[1]}"
|
|
mysql_dist_string="$(mysql $mysql_credential_args -N -s -e "SELECT VERSION()" 2> /dev/null)"
|
|
if [[ "$mysql_dist_string" =~ MariaDB ]]; then
|
|
mysql_dist="MariaDB $mysql_version"
|
|
else
|
|
mysql_dist="MySQL/Percona $mysql_version"
|
|
fi
|
|
echo " [$index_arr] $mysql_dist"
|
|
_temp_arr[${index_arr}]="$mysql_credential_args"
|
|
#_temp_arr+=("$mysql_credential_args")
|
|
(( index_arr++ ))
|
|
done
|
|
|
|
_OK=false
|
|
echo ""
|
|
echononl "Eingabe: "
|
|
while ! $_OK ; do
|
|
read _IN
|
|
if is_number "$_IN" && [[ -n ${_temp_arr[$_IN]} ]]; then
|
|
|
|
MYSQL_CREDENTIAL_ARGS="${_temp_arr[$_IN]}"
|
|
_OK=true
|
|
else
|
|
echo ""
|
|
echo -e "\tFalsche Eingabe !"
|
|
echo ""
|
|
echononl "Eingabe: "
|
|
fi
|
|
done
|
|
|
|
MYSQL_CREDENTIALS_GIVEN=true
|
|
|
|
fi
|
|
|
|
if $DATABASE_USER_NEEDED ; then
|
|
echo ""
|
|
echo -e "\033[32m--\033[m"
|
|
echo ""
|
|
echo "Insert Database user who will grant full access all databases"
|
|
echo ""
|
|
echo ""
|
|
if [ -z "$DATABASE_USER" ]; then
|
|
echononl "Database user who will grant full access all databases: "
|
|
read DATABASE_USER
|
|
while [ "X$DATABASE_USER" = "X" ] ; do
|
|
echo -e "\n\t\033[33m\033[1mEingabe erforderlich.\033[m\n"
|
|
echononl "Database user for database who will grant full access all databases: "
|
|
read DATABASE_USER
|
|
done
|
|
else
|
|
_DATABASE_USER="$DATABASE_USER"
|
|
echononl "Database user who will grant full access all databases [${_DATABASE_USER}]: "
|
|
read DATABASE_USER
|
|
if [[ "X$DATABASE_USER" = "X" ]]; then
|
|
DATABASE_USER=$_DATABASE_USER
|
|
fi
|
|
fi
|
|
fi
|
|
|
|
if $DATABASE_PASSWD_NEEDED ; then
|
|
echo ""
|
|
echo -e "\033[32m--\033[m"
|
|
echo ""
|
|
echo "Insert password for Database user '${DATABASE_USER}'.."
|
|
echo ""
|
|
echo ""
|
|
if [ -z "$DATABASE_PASSWD" ]; then
|
|
echononl "Password for Database user '${DATABASE_USER}': "
|
|
read DATABASE_PASSWD
|
|
while [ "X$DATABASE_PASSWD" = "X" ] ; do
|
|
echo -e "\n\t\033[33m\033[1mEingabe erforderlich.\033[m\n"
|
|
echononl "Password for Database user '${DATABASE_USER}': "
|
|
read DATABASE_PASSWD
|
|
done
|
|
else
|
|
_DATABASE_PASSWD="$DATABASE_PASSWD"
|
|
echononl "Password for Database user '${DATABASE_USER}' [${_DATABASE_PASSWD}]: "
|
|
read DATABASE_PASSWD
|
|
if [[ "X$DATABASE_PASSWD" = "X" ]]; then
|
|
DATABASE_PASSWD=$_DATABASE_PASSWD
|
|
fi
|
|
fi
|
|
fi
|
|
|
|
echo ""
|
|
echo -e "\033[32m--\033[m"
|
|
echo ""
|
|
echo " Access from outside?"
|
|
echo ""
|
|
echo " Give a blank seoarated list of IP-Addresses."
|
|
echo ""
|
|
echo " Leave empty to deny access from outside."
|
|
echo ""
|
|
echo " Example:"
|
|
echo ""
|
|
echo -e " \e[90m# A single IP Address\033[m"
|
|
echo -e " \033[1m192.168.52.192.168.52.44\033[m"
|
|
echo ""
|
|
echo -e " \e[90m# Class C Network\033[m"
|
|
echo -e " \033[1m192.168.52.%\033[m"
|
|
echo ""
|
|
echo -e " \e[90m# A Class C and a Class A Network\033[m"
|
|
echo -e " \033[1m192.168.52.% 10.%\033[m"
|
|
echo ""
|
|
echononl "List of IP Addresses: "
|
|
read IP_ADDRESSES
|
|
if [[ -n "$IP_ADDRESSES" ]] ; then
|
|
ACCESS_FROM_OUTSIDE=true
|
|
else
|
|
ACCESS_FROM_OUTSIDE=false
|
|
fi
|
|
|
|
fi
|
|
|
|
|
|
if $MYSQL_CREDENTIALS_GIVEN ; then
|
|
|
|
# - Get MySQL Version
|
|
# -
|
|
echo ""
|
|
echo -e "\033[32m--\033[m"
|
|
echo ""
|
|
echononl " Get MySQL Version"
|
|
_version="$(mysql $MYSQL_CREDENTIAL_ARGS -N -s -e "SELECT VERSION()" 2> $tmp_log_file)"
|
|
if [[ $? -ne 0 ]] ; then
|
|
echo_failed
|
|
fatal "$(cat $tmp_log_file)"
|
|
else
|
|
echo_ok
|
|
fi
|
|
|
|
IFS='.' read -r -a version_arr <<< "$_version"
|
|
declare -i MAJOR_VERSION="${version_arr[0]}"
|
|
declare -i MINOR_VERSION="${version_arr[1]}"
|
|
_path_level="${version_arr[2]}"
|
|
declare -i PATCH_LEVEL="${_path_level%%-*}"
|
|
|
|
## - Get current MySQL Distribution
|
|
## -
|
|
echononl " Get current MySQL distribution .."
|
|
if [[ -z "$_version" ]]; then
|
|
echo_failed
|
|
fatal "No installed MySQL server or distribution found!"
|
|
elif [[ "$_version" =~ MariaDB ]]; then
|
|
MYSQL_CUR_DISTRIBUTION="MariaDB"
|
|
else
|
|
MYSQL_CUR_DISTRIBUTION="MySQL"
|
|
fi
|
|
echo_ok
|
|
echo ""
|
|
echo -e "\033[32m--\033[m"
|
|
echo ""
|
|
|
|
else
|
|
|
|
detect_mysql_version
|
|
|
|
MAJOR_VERSION="$MYSQL_MAJOR_VERSION"
|
|
MINOR_VERSION="$MYSQL_MINOR_VERSION"
|
|
PATCH_LEVEL="$MYSQL_PATCH_LEVEL"
|
|
|
|
if [[ "$MYSQL_CUR_DISTRIBUTION" = "MariaDB" ]] && ([[ $MAJOR_VERSION -gt 10 ]] \
|
|
|| ( [[ $MAJOR_VERSION -eq 10 ]] && [[ $MINOR_VERSION -gt 3 ]] )) ; then
|
|
if [[ -S "/tmp/mysql.sock" ]]; then
|
|
MYSQL_CREDENTIAL_ARGS="-u root -S /tmp/mysql.sock"
|
|
elif [[ -S "/run/mysqld/mysqld.sock" ]]; then
|
|
mysql_credential_args="-u root -S /run/mysqld/mysqld.sock"
|
|
elif [[ -S "/var/run/mysqld/mysqld.sock" ]]; then
|
|
MYSQL_CREDENTIAL_ARGS="-u root -S /var/run/mysqld/mysqld.sock"
|
|
else
|
|
fatal "Parameter 'MYSQL_CREDENTIAL_ARGS' cannot be determined automated.
|
|
|
|
Use configuration file "$conf_file" to set
|
|
parameter manually."
|
|
fi
|
|
else
|
|
if $(mysql --login-path=local -e ";" > /dev/null 2>&1) ; then
|
|
MYSQL_CREDENTIAL_ARGS="--login-path=local"
|
|
elif [[ -f "/usr/local/mysql/sys-maint.cnf" ]] ; then
|
|
MYSQL_CREDENTIAL_ARGS="--defaults-file=/usr/local/mysql/sys-maint.cnf"
|
|
elif [[ -f "/etc/mysql/debian.cnf" ]] ; then
|
|
MYSQL_CREDENTIAL_ARGS="--defaults-file=/etc/mysql/debian.cnf"
|
|
else
|
|
fatal "Parameter 'MYSQL_CREDENTIAL_ARGS' cannot be determined automated.
|
|
|
|
Use configuration file "$conf_file" to set
|
|
parameter manually."
|
|
fi
|
|
fi
|
|
|
|
fi
|
|
|
|
|
|
|
|
if ! $QUIET_MODE ; then
|
|
echo ""
|
|
echo ""
|
|
echo -e "\033[32m\033[1m====================\033[m"
|
|
echo "Grant MySQL Database access settings"
|
|
echo -e "\033[32m\033[1m====================\033[m"
|
|
echo ""
|
|
echo " MySQL Distribution...........: $MYSQL_CUR_DISTRIBUTION"
|
|
echo " MySQL Version................: ${MAJOR_VERSION}.${MINOR_VERSION}.${PATCH_LEVEL}"
|
|
echo " MySQL Credentials............: $MYSQL_CREDENTIAL_ARGS"
|
|
echo ""
|
|
echo " Database user................: $DATABASE_USER"
|
|
echo " Database password............: $DATABASE_PASSWD"
|
|
echo ""
|
|
if $ACCESS_FROM_OUTSIDE ; then
|
|
echo " Access from outside..........: $IP_ADDRESSES"
|
|
else
|
|
echo -e " Access from outside..........: \033[33m\033[1m- denied -\033[m"
|
|
fi
|
|
echo ""
|
|
echo ""
|
|
fi
|
|
|
|
if ! $NON_INTERACTIVE_MODE ; then
|
|
echo -e -n "\033[1mContinue with above settings? [y/n]:\033[m "
|
|
read OK
|
|
while [[ "X${OK}X" = "XX" ]] ; do
|
|
echo ""
|
|
echo -e -n "\033[1mContinue with above settings? [y/n]:\033[m "
|
|
read OK
|
|
done
|
|
|
|
if [[ "${OK,,}" != 'yes' ]] && [[ "${OK,,}" != 'y' ]]; then
|
|
fatal "Abort by user request."
|
|
fi
|
|
|
|
|
|
fi
|
|
|
|
|
|
if ! $QUIET_MODE ; then
|
|
echo ""
|
|
echo ""^
|
|
echo -e " Processing database user \033[1m${DATABASE_USER}\033[m"
|
|
echo ""
|
|
fi
|
|
|
|
|
|
|
|
# - Check if User already exists
|
|
# -
|
|
echononl " Check if user '$DATABASE_USER' already exists for localhost .."
|
|
if [[ "$(mysql $MYSQL_CREDENTIAL_ARGS -se "SELECT EXISTS(SELECT 1 FROM mysql.user WHERE user = '${DATABASE_USER}')")" = "1" ]]; then
|
|
user_exists=true
|
|
else
|
|
user_exists=false
|
|
fi
|
|
echo_ok
|
|
|
|
|
|
|
|
echononl " Create database user '$DATABASE_USER' access from locahost"
|
|
if ! $user_exists ; then
|
|
mysql $MYSQL_CREDENTIAL_ARGS -N -s -e \
|
|
"CREATE USER '$DATABASE_USER'@'localhost' IDENTIFIED BY '$DATABASE_PASSWD'" \
|
|
> $tmp_log_file 2>&1
|
|
if [[ $? -ne 0 ]] ; then
|
|
echo_failed
|
|
error "$(cat $tmp_log_file)"
|
|
else
|
|
echo_ok
|
|
fi
|
|
else
|
|
echo_skipped
|
|
fi
|
|
|
|
echononl " Grant permissions to access and use the MySQL server to user '$DATABASE_USER'"
|
|
mysql $MYSQL_CREDENTIAL_ARGS -N -s -e \
|
|
"GRANT USAGE ON *.* TO '$DATABASE_USER'@'localhost'" \
|
|
> $tmp_log_file 2>&1
|
|
if [[ $? -ne 0 ]] ; then
|
|
echo_failed
|
|
error "$(cat $tmp_log_file)"
|
|
else
|
|
echo_ok
|
|
fi
|
|
|
|
echononl " Grant all privileges to user '$DATABASE_USER' on all database "
|
|
mysql $MYSQL_CREDENTIAL_ARGS -N -s -e \
|
|
"GRANT SELECT, SHOW VIEW, EVENT, LOCK TABLES, RELOAD, REPLICATION CLIENT ON *.* TO '$DATABASE_USER'@'localhost'" \
|
|
> $tmp_log_file 2>&1
|
|
if [[ $? -ne 0 ]] ; then
|
|
echo_failed
|
|
error "$(cat $tmp_log_file)"
|
|
else
|
|
echo_ok
|
|
fi
|
|
|
|
if $ACCESS_FROM_OUTSIDE ; then
|
|
|
|
for _ip in $IP_ADDRESSES ; do
|
|
|
|
echononl " Check if user '$DATABASE_USER' already exists for '$_ip' .."
|
|
_count="$(mysql $MYSQL_CREDENTIAL_ARGS mysql -N -s -e \
|
|
"SELECT count(User) FROM user WHERE User = '$DATABASE_USER' and Host = '$_ip'" 2> $tmp_log_file)"
|
|
if [[ -z "$_count" ]]; then
|
|
echo_failed
|
|
error $(cat "$tmp_log_file")
|
|
elif [[ $_count -eq 0 ]]; then
|
|
echo_ok
|
|
|
|
echononl " Create database user '$DATABASE_USER' for '$_ip'"
|
|
mysql $MYSQL_CREDENTIAL_ARGS -N -s -e \
|
|
"CREATE USER '$DATABASE_USER'@'$_ip' IDENTIFIED BY '$DATABASE_PASSWD'" \
|
|
> $tmp_log_file 2>&1
|
|
if [[ $? -ne 0 ]] ; then
|
|
echo_failed
|
|
error "$(cat $tmp_log_file)"
|
|
else
|
|
echo_ok
|
|
fi
|
|
else
|
|
echo_ok
|
|
warn "User '$DATABASE_USER' already exists for host '$_ip'"
|
|
fi
|
|
|
|
echononl " Allow access to user '$DATABASE_USER' on all databases from '$_ip'"
|
|
mysql $MYSQL_CREDENTIAL_ARGS -N -s -e \
|
|
"GRANT USAGE ON *.* TO '$DATABASE_USER'@'$_ip'" > $tmp_log_file 2>&1
|
|
if [[ $? -ne 0 ]] ; then
|
|
echo_failed
|
|
error "$(cat $tmp_log_file)"
|
|
else
|
|
echo_ok
|
|
fi
|
|
|
|
echononl " Grant all privileges to user '$DATABASE_USER' on all databases from '$_ip'"
|
|
mysql $MYSQL_CREDENTIAL_ARGS -N -s -e \
|
|
"GRANT SELECT, SHOW VIEW, EVENT, LOCK TABLES, RELOAD, REPLICATION CLIENT ON *.* TO '$DATABASE_USER'@'$_ip'" \
|
|
> $tmp_log_file 2>&1
|
|
if [[ $? -ne 0 ]] ; then
|
|
echo_failed
|
|
error "$(cat $tmp_log_file)"
|
|
else
|
|
echo_ok
|
|
fi
|
|
|
|
done
|
|
|
|
fi
|
|
|
|
|
|
|
|
echononl " Flush Privileges.."
|
|
mysql $MYSQL_CREDENTIAL_ARGS -N -s -e "FLUSH PRIVILEGES" > $tmp_log_file 2>&1
|
|
if [[ $? -ne 0 ]] ; then
|
|
echo_failed
|
|
error "$(cat $tmp_log_file)"
|
|
else
|
|
echo_ok
|
|
fi
|
|
|
|
if ! $QUIET_MODE ; then
|
|
echo ""
|
|
fi
|
|
|
|
echononl " Create directory '${working_dir}/databases'.."
|
|
if [[ -d "${working_dir}/databases" ]]; then
|
|
echo_skipped
|
|
else
|
|
mkdir ${working_dir}/databases > $tmp_log_file 2>&1
|
|
if [[ $? -ne 0 ]] ; then
|
|
echo_failed
|
|
error "$(cat $tmp_log_file)"
|
|
else
|
|
echo_ok
|
|
fi
|
|
fi
|
|
|
|
|
|
if ! $QUIET_MODE ; then
|
|
echo ""
|
|
fi
|
|
clean_up 0
|