Task #10956: Clone geoserver.d4science.org - D4Science Infrastructure - D4science

Actions

Copy link

Task #10956

closed

Task #10957: Test GS Migration

Task #10955: Provide production geoserver clone

Clone geoserver.d4science.org

Added by Fabio Sinibaldi over 7 years ago. Updated over 7 years ago.

Status:

Closed

Priority:

Urgent

Assignee:

_InfraScience Systems Engineer

Category:

Other

Target version:

SDI-nodes management

Start date:

Jan 17, 2018

Due date:

% Done:

100%

Estimated time:

Infrastructure:

Production

Description

Please clone mentioned VM and grant the new machine access to the following databases:

timeseriesgisdb on node50.p.d4science.research-infrastructures.eu
aquamapsdb on geoserver-db.d4science.org
aquamapsgeomar on node52.p.d4science.research-infrastructures.eu
mpa on geoserver-db.d4science.org

Access to these databases needs to be read only for security reasons, so an ad-hoc user should be created and provided in this ticket.

Related issues

Actions

Copy link

Updated by Vincenzo Terrano over 7 years ago

Priority changed from Normal to Urgent

What is the status of cloning process?

Actions

Copy link

Updated by Tommaso Piccioli over 7 years ago

Status changed from New to In Progress
Assignee changed from Andrea Dell'Amico to _InfraScience Systems Engineer
% Done changed from 0 to 50

The new VM is almost ready, accesses to the various databases must be created.

Actions

Copy link

Updated by Vincenzo Terrano over 7 years ago

When will it be ready?

Actions

Copy link

Updated by Andrea Dell'Amico over 7 years ago

The user has the CONNECT role on all the required DBs and the SELECT role on all the DB tables. Because the databases run on postgresql < 9 the grants must be set on each table. If new tables will be added, the grants on that tables must be set again. I used commands like

CREATE USER reader WITH PASSWORD '**********';
grant CONNECT on DATABASE aquamapsgeomar to reader;
psql -At -d aquamapsgeomar -c "SELECT 'GRANT SELECT ON '|| tablename||' TO reader;' FROM pg_tables WHERE schemaname='public';" | psql -d aquamapsgeomar
psql -At -d aquamapsgeomar -c "SELECT 'GRANT SELECT ON '||c.relname||' TO reader;' FROM pg_class c JOIN pg_namespace n ON (n.oid=c.relnamespace) WHERE c.relkind='S' AND n.nspname='public';" | psql -d aquamapsgeomar

to configure the user. pg_hba.conf has been configured accordingly.

Actions

Copy link