Short reply: we are looking into BNL firewall configuration to make sure that the MySQL port on pii3 is open and that the opus:7772 data port is open, too. K.O. On Fri, Jul 21, 2000 at 10:24:11AM +0200, Anders Holm wrote: > On Thu, 20 Jul 2000, Konstantin Olchanski wrote: > > > > > > > Why do you use the MySQL server on "localhost" instead of pii3? > > How is database access to pii3 from NBI? > > Does it work? > > Is it fast or slow? > > I can not access the MySQL server on pii3 with > "mysql -h pii3.brahms.bnl.gov -u brahmlib" > or as any other user (e.g. aholm). The program is hung. > > Testing the data base procedures requires data bases to be created and > priviligies to be granted to the mysql user going to use the databases. > This requires the mysql root priviliges and thus the mysql root password. > So to be in control of things I decided to use my local server. I also > imagined that this situation was likely to occur for other people testing > the data base softweare. (See brat/test/README_TestDB). > > So here are some questions: > > - Will we use a fixed mysql user name (brahms) for normal access? > or will we grant standard privileges to all in the colaboration.? > - How many different categories of users do we want? (user roles)? > - Should we grant extra privileges for access to the local server? > - Should we use password protection? How to share it among us and keep > it seecret to the rest of the wotld > > I am currently thinking of the following roles a user can have relative > to a database > > Role Privileges > > reader select > inserter select insert > updater select insert update delete > manager select insert update delete create > > > Role Data base > > reader BrMainDB > inserter BrcalibDB > updater BrcalibDB on local host > manager on local host > > Something like that. I think a common not too secret password will protect > us against the random tresspasser. Do we need better protection? > > > > Maybe you should implement a fall back list of "known" servers > > and connect to the "right" one depending where you are running, i.e. > > if hostname is *.bnl.gov, always use pii3, > > if hostname is *.nbi.dk, use the NBI, > > otherwise use "localhost" > > but if it is not available, use the server on pii3.brahms.bnl.gov > > May be we should have a simple ascii config file with > > - Host of the main DB with default data bases for everything > - Deviations from the defaults. > > > > > > > K.O. > > > > > > On Wed, Jul 19, 2000 at 03:31:37PM +0200, Anders Holm wrote: > > > Data base testing > > > > > > In brat/test > > > - TestDB... programs now use a local mysql server rather than pii3. > > > - Operations needing mysql root privs extracted into shell scripts > > > TestDBCreate.sh and TestDBClean.sh. > > > - TestDBSetup, TestDBRead and TestDBWrite changed accordingly. > > > - README_TestDB has some documentation > > > > > > brat/db > > > - BrMainDB translates "localhost" host name to true name of local host > > > to make TCP/IP to be used in stead of unix sockets. (is there a better > > > way?) > > > - BrMainDB uses password parameters when connecting > > > > > > NB: If someone is thinking of using the data base software then I > > > would like to help you find the most convenient interface and > > > update the brat/db accordingly. > > > > > > Anders > > > ========================================================= > > > Anders Holm email: aholm@nbi.dk > > > Niels Bohr institute phone: (45) 35 32 52 13 > > > University of Copenhagen fax: (45) 35 32 50 16 > > > Blegdamsvej 17 > > > DK-2100 Copenhagen > > > Denmark > > > ======================================================== > > > > > > > -- > > Konstantin Olchanski > > Physics Department, Brookhaven National Laboratory, Long Island, New York > > olchansk@bnl.gov > > > > Anders > > ========================================================= > Anders Holm email: aholm@nbi.dk > Niels Bohr institute phone: (45) 35 32 52 13 > University of Copenhagen fax: (45) 35 32 50 16 > Blegdamsvej 17 > DK-2100 Copenhagen > Denmark > ======================================================== > -- Konstantin Olchanski Physics Department, Brookhaven National Laboratory, Long Island, New York olchansk@bnl.gov
This archive was generated by hypermail 2b29 : Fri Jul 21 2000 - 15:33:04 EDT