Paweł Domański
91 lines
1.2 KiB
Bash
91 lines
1.2 KiB
Bash
#!/bin/bash
|
|
|
|
DBNAME="postgres"
|
|
USER="-U postgres"
|
|
PORT="-p 5432"
|
|
|
|
usage() {
|
|
echo "Usage: $0 [-d <dbname> -U <user> -p <port> u]"
|
|
exit 1
|
|
}
|
|
|
|
while getopts "d:p:uU:" OPT;
|
|
do case "${OPT}" in
|
|
d) DBNAME=$OPTARG
|
|
;;
|
|
p) PORT="-p $OPTARG"
|
|
;;
|
|
U) USER="-U $OPTARG"
|
|
;;
|
|
u) usage
|
|
;;
|
|
[?]) usage
|
|
esac;
|
|
done
|
|
|
|
|
|
lockout()
|
|
{
|
|
|
|
CNT=$(psql $PORT $USER $DBNAME <<_QUERY_
|
|
|
|
DROP TABLE IF EXISTS pg_lockout;
|
|
CREATE TABLE pg_lockout
|
|
AS SELECT rolname,
|
|
rolsuper,
|
|
rolcanlogin
|
|
FROM pg_authid
|
|
WHERE rolsuper IS FALSE;
|
|
|
|
ALTER TABLE pg_lockout
|
|
ADD CONSTRAINT pg_lockout_pkey PRIMARY KEY (rolname);
|
|
|
|
UPDATE pg_authid au
|
|
SET rolcanlogin = FALSE
|
|
FROM pg_lockout lo
|
|
WHERE lo.rolcanlogin = TRUE
|
|
AND au.rolname = lo.rolname;
|
|
|
|
_QUERY_
|
|
|
|
)
|
|
|
|
}
|
|
|
|
current_user()
|
|
{
|
|
|
|
CUSER=$(psql -t $PORT $USER $DBNAME <<_QUERY_
|
|
|
|
SELECT TRIM(BOTH FROM current_user);
|
|
|
|
_QUERY_
|
|
|
|
)
|
|
|
|
}
|
|
|
|
|
|
###############################################################
|
|
# MAIN #
|
|
###############################################################
|
|
|
|
current_user
|
|
|
|
echo "current user is $CUSER"
|
|
|
|
if [ $CUSER != "postgres" ]
|
|
then
|
|
echo "You must be postgres to execute this script."
|
|
echo "Aborting."
|
|
exit 1
|
|
fi
|
|
|
|
|
|
lockout
|
|
|
|
echo "Users locked out = $CNT"
|
|
|
|
exit 0
|
|
|