Re: CVS update: Data base test programs.

From: Anders Holm (aholm@alf.nbi.dk)
Date: Fri Jul 21 2000 - 04:24:11 EDT

  • Next message: Konstantin Olchanski: "brat-config in operator account?"

    On Thu, 20 Jul 2000, Konstantin Olchanski wrote:
    
    > 
    > 
    > Why do you use the MySQL server on "localhost" instead of pii3?
    > How is database access to pii3 from NBI?
    > Does it work?
    > Is it fast or slow?
    
    I can not access the MySQL server on pii3 with 
      "mysql -h pii3.brahms.bnl.gov -u brahmlib" 
    or as any other user (e.g. aholm). The program is hung.
    
    Testing the data base procedures requires data bases to be created and
    priviligies to be granted to the mysql user going to use the databases.
    This requires the mysql root priviliges and thus the mysql root password.
    So to be in control of things I decided to use my local server. I also
    imagined that this situation was likely to occur for other people testing
    the data base softweare. (See brat/test/README_TestDB).
    
    So here are some questions:
    
    - Will we use a fixed mysql user name (brahms) for normal access?
      or will we grant standard privileges to all in the colaboration.?
    - How many different categories of users do we want? (user roles)?
    - Should we grant extra privileges for access to the local server?
    - Should we use password protection? How to share it among us and keep
      it seecret to the rest of the wotld
    
    I am currently thinking of the following roles a user can have relative
    to a database
    
      Role      Privileges
    
      reader    select
      inserter  select insert
      updater   select insert update delete
      manager   select insert update delete create
    
    
      Role      Data base
    
      reader    BrMainDB
      inserter  BrcalibDB
      updater   BrcalibDB on local host
      manager   on local host
    
    Something like that. I think a common not too secret password will protect
    us against the random tresspasser. Do we need better protection?
    
     
    > Maybe you should implement a fall back list of "known" servers
    > and connect to the "right" one depending where you are running, i.e.
    > if hostname is *.bnl.gov, always use pii3,
    > if hostname is *.nbi.dk, use the NBI,
    > otherwise use "localhost"
    > but if it is not available, use the server on pii3.brahms.bnl.gov
    
    May be we should have a simple ascii config file with
    
    - Host of the main DB with default data bases for everything
    - Deviations from the defaults.
    
    > 
    > 
    > K.O.
    > 
    > 
    > On Wed, Jul 19, 2000 at 03:31:37PM +0200, Anders Holm wrote:
    > > Data base testing
    > > 
    > > In brat/test
    > > - TestDB... programs now use a local mysql server rather than pii3.
    > > - Operations needing mysql root privs extracted into shell scripts
    > >   TestDBCreate.sh and TestDBClean.sh.
    > > - TestDBSetup, TestDBRead and TestDBWrite changed accordingly.
    > > - README_TestDB has some documentation
    > > 
    > > brat/db
    > > - BrMainDB translates "localhost" host name to true name of local host
    > >   to make TCP/IP to be used in stead of unix sockets. (is there a better
    > >   way?)
    > > - BrMainDB uses password parameters when connecting
    > > 
    > > NB: If someone is thinking of using the data base software then I
    > > would like to help you find the most convenient interface and
    > > update the brat/db accordingly. 
    > > 
    > > Anders
    > > =========================================================
    > > Anders Holm                     email:   aholm@nbi.dk
    > > Niels Bohr institute            phone:   (45) 35 32 52 13 
    > > University of Copenhagen        fax:     (45) 35 32 50 16
    > > Blegdamsvej 17
    > > DK-2100 Copenhagen
    > > Denmark
    > > ========================================================
    > > 
    > 
    > -- 
    > Konstantin Olchanski
    > Physics Department, Brookhaven National Laboratory, Long Island, New York
    > olchansk@bnl.gov
    > 
    
    Anders
    
    =========================================================
    Anders Holm                     email:   aholm@nbi.dk
    Niels Bohr institute            phone:   (45) 35 32 52 13 
    University of Copenhagen        fax:     (45) 35 32 50 16
    Blegdamsvej 17
    DK-2100 Copenhagen
    Denmark
    ========================================================
    



    This archive was generated by hypermail 2b29 : Fri Jul 21 2000 - 04:24:50 EDT