Changes between Version 1 and Version 2 of DatabaseBasedAnalysis

Timestamp:

08/03/18 16:48:57 (6 years ago)

Author:

tbretz

Comment:

--

DatabaseBasedAnalysis

@@ -2 +2 @@
 
 The database is hosted at '''ihp-pc45.ethz.ch'''
+
 == User ==
 
 First, you need a user. For the moment, a user 'fact' is available with the standard password. The user 'fact' is allowed to connect from everywhere if an encrypted connection is used. Usually, all reasonably recent mysql clients are using encrypted connections. So in most cases, a simple should be enough
 
-{{{> mysql -h ihp-pc45.ethz.ch -u fact -p}}}
+{{{> mysql -C -h ihp-pc45.ethz.ch -u fact -p}}}
 
 To enforce encryption, --ssl (oder clients) or --ssl-mode=REQUIRED can be used. If you have problems with the connection, you can also try --protocol=TCP.
+
+If you access the database from outside of ETH, it is wise to enable compression with the -C option. Inside ETH (in particular on ihp-pc45), enabling -C is certainly a performance drawback and should be avoided.
 
 Note that the mysql client libraries at ISDC are too old and do not allow for encrypted connections. Thus no connection from ISDC is possible without tunnel. How to tunnel your connection is explained in the following. Note that it requires an account on ihp-pc45 (which I think should not be generally available). Thus this is mainly meant as a solution for automatic processes running at ISDC, for example, to update the database.
@@ -17 +20 @@
 
 {{{ISDC> ssh -x -C -n -N -q -L 10000:localhost:3306 ethz@ihp-pc45.ethz.ch}}}
+
+(It is wise to enable compression of the connection with the -C option)
 
 Note that after log-in this process seems to stall (nothing happens anymore). This is correct. The tunnel is open. It will forward the local port 10000 from the ISDC machine to the port 3306 on a machine which is accessible as 'locahost' from ihp-pc45.
@@ -28 +33 @@
 As the mysql connection now comes via the loopback interface and not via the external IP, the connection of the mysql client is allowed to be unencrypted.
 
-== backward Tunnel ==
+== Backward Tunnel ==
 
 Assume that you are already logged into ihp-pc45.ethz.ch and want to execute a mysql at ISDC accessing ihp-pc45, a backward tunnel can be used:
 
 {{{ihp-pc45> ssh -x -C -n -N -q -R 10000:localhost:3306 user@isdc-nx.isdc.unige.ch}}}
+
+(It is wise to enable compression of the connection with the -C option)
 
 This command will log you into isdc-nx and (in parallel) create a tunnel from port 10000 at isdc-nx to port 3306 of a machine which is called 'localhost' from where you started the ssh connection (ihp-pc45).
@@ -43 +50 @@
 
 As the mysql connection now comes via the loopback interface and not via the external IP, the connection of the mysql client is allowed to be unencrypted.
+
+== rootifysql ==
+
+A convenient way to retrieve data is the ''rootifysql'' tool which is part of the FACT++ package. More details can be found either calling it with the --help option or at https://www.fact-project.org/logbook/showthread.php?tid=4192. The same access rules as if the native mysql client is used apply.
+
+== Other alternatives ===
+