Changes between Version 8 and Version 9 of ChefNotes

Timestamp:

May 19, 2014 9:24:20 AM (11 years ago)

Author:

Geoff Lawler

Comment:

--

ChefNotes

@@ -87 +87 @@
 Success. accounts::default recipe is
 {{{
+require 'rubygems'
+require 'mysql2'
+
+# All these hardcoded values need to be imported somehow.
+dbhost = "myboss"
+dbuser = "mysql"
+dbname = "tbdb"
+pid = "Deter"
+
+Chef::Log.info("Connecting to db #{dbname} on #{dbhost} as #{dbuser}")
+client = Mysql2::Client.new(:host => dbhost, :username => dbuser, :database => dbname)
+Chef::Log.info("Connected. Querying for appropriate user accounts.")
+
+# ugly SQL stolen from tmcd.c
+# to do this right, we need to analyise all the user cases from tmcd.c for 
+# account creation and add them here (or the ones we want to support anyway.
+stmt = "select distinct "
+stmt << "  u.uid,u.usr_pswd,u.unix_uid,u.usr_name, "
+stmt << "  p.trust,g.pid,g.gid,g.unix_gid,u.admin, "
+stmt << "  u.emulab_pubkey,u.home_pubkey, "
+stmt << "  UNIX_TIMESTAMP(u.usr_modified), "
+stmt << "  u.usr_email,u.usr_shell, "
+stmt << "  u.widearearoot,u.wideareajailroot, "
+stmt << "  u.usr_w_pswd,u.uid_idx "
+stmt << "from group_membership as p "
+stmt << "join users as u on p.uid_idx=u.uid_idx "
+stmt << "join groups as g on "
+stmt << "     p.pid=g.pid and p.gid=g.gid "
+stmt << "where ((p.pid='#{pid}')) and p.trust!='none' "
+stmt << "      and u.status='active' "
+stmt << "      and u.webonly=0 "
+stmt << "      and g.unix_gid is not NULL "
+stmt << "order by u.uid"
+
+results = client.query(stmt)
+
+results.each do | row |
+    user row['uid'] do
+        Chef::Log.info("Creating account for #{row['uid']} (#{row['usr_name']})")
+        supports :manage_home => false   # do not create home dir, it'll be mounted from ops
+        supports :non_unique => false    # so not allow multiple account with like uids.
+        password row['usr_pswd']
+        shell "/bin/#{row['usr_shell']}"  # TODO fix path here what if shell is not in /bin?
+        home "/users/#{row['uid']}"
+        uid row['unix_uid']
+        gid row['unix_gid']
+        username row['uid']
+        if row['admin']
+            Chef::Log.info("#{row['uid']} is an admin account.")
+            system true
+        end
+        action :create
+    end
+end
+
 }}}