Skip to content

README.md

Latest commit

 

History

History
102 lines (67 loc) · 3.13 KB

README.md

File metadata and controls

102 lines (67 loc) · 3.13 KB
Raw

MySQL User Management Script

This Bash script provides a comprehensive solution for managing MySQL user access and privileges across multiple databases and hosts. It offers various functionalities to streamline user administration tasks.

Scripts

mysql-access.sh: Main script for creating, updating, and managing MySQL user access.

temp-delete.sh: Script for automatically deleting temporary users based on expiration dates.

Features

  • Create new MySQL users with specified privileges
  • Update existing user privileges
  • Grant access to specific databases or all databases
  • Migrate users between different hosts
  • Provide temporary access with automatic expiration
  • Delete users from all hosts
  • Support for different environments (Staging, Demo, Sandbox, Production)

Features

  • Create new MySQL users and grant privileges
  • Update existing user privileges
  • Migrate users from one host to another
  • Delete users from all hosts
  • Provide temporary access to users

Usage

To use the script, run it with Bash:

./mysql-access.sh

The script will present a menu with the following options:

  1. Create users and grant privileges
  2. Migrate users from different hosts
  3. Update user privileges
  4. Delete users from all hosts
  5. Provide temporary access on a host

Follow the prompts to perform the desired action.

temp-delete.sh

This script automatically deletes temporary users whose access has expired. It should be run periodically (e.g., daily via a cron job) to maintain security. To run the script:

./temp-delete.sh

Configuration

Before running the script, ensure you have a DB.txt file in the same directory with the following content:

dbuser=your_database_username
password=your_database_password

Replace your_database_username and your_database_password with the appropriate credentials for your MySQL server.

Host Configuration

The script uses two files to manage hosts:

  • hostname.txt: List of non-production hosts
  • hostname-prod.txt: List of production hosts

Ensure these files are present and contain the appropriate host names.

User Management

User information is stored in a user.txt file with the following format:

username password staging_privilege demo_privilege sandbox_privilege prod_privilege

The script will read from and update this file as needed.

Temporary Access

Temporary user access is managed through a user_temp.txt file. The script will create and update this file when providing temporary access.

Security Considerations

  • Ensure the script and configuration files have appropriate permissions
  • Regularly review and update user access
  • Use strong, unique passwords for each user
  • Consider implementing additional security measures such as SSL connections and IP restrictions

Limitations

  • The script assumes a specific database naming convention (e.g., databases starting with "issue", "elastic", "cmdb", "ivr", "brcm_", or "signup_")
  • It does not handle advanced MySQL features like role-based access control

Maintenance

Regularly review and update the script to ensure it meets your organization's security policies and MySQL version compatibility.