aboutsummaryrefslogblamecommitdiff
path: root/op_guide/create_database/README.md
blob: fb3bdd95ae44ce695baca0eaf878bf4861976041 (plain) (tree)
1
2
3
4
5
6
7
8
9
10









                                                                         

                                                                                     

                                              
       


                                                           

   
                                                                  
 


                                       
   
## 1. Create a LDAP user and assign a password for your service

Go to guichet.deuxfleurs.fr

  1. Everything takes place in `ou=services,ou=users,dc=deuxfleurs,dc=fr`
  2. Create a new user, like `johny`
  3. Generate a random password with `openssl rand -base64 32`
  4. Hash it with `slappasswd`
  5. Add a `userpassword` entry with the hash

This step can also be done using the automated tool `secretmgr.py` in the app folder.

## 2. Connect to postgres with the admin users

```bash
# 1. Launch ssh tunnel given in the README 
# 2. Make sure you have postregsql client installed locally
psql -h localhost -U postgres -W postgres
```

## 3. Create the binded users with LDAP in postgres + the database

```sql
CREATE USER johny;
CREATE DATABASE amazingapp OWNER johny;
```