Install LAMP phpMyAdmin and MariaDB into CentOS7
-
The only computer allowed to access http://ip_addr/phpMyAdmin is the localhost.... you'd have to be running a web browser on the server to get access to that page. That's what all those 'Deny from All', 'Allow from 172.0.0.1', and 'Allow from ::1' are doing. Easiest thing to do is add an 'Allow from my_ip' to each section, assuming you have a fixed ip address on your workstation.
-
@travisdh1 said in Install LAMP phpMyAdmin and MariaDB into CentOS7:
The only computer allowed to access http://ip_addr/phpMyAdmin is the localhost.... you'd have to be running a web browser on the server to get access to that page. That's what all those 'Deny from All', 'Allow from 172.0.0.1', and 'Allow from ::1' are doing. Easiest thing to do is add an 'Allow from my_ip' to each section, assuming you have a fixed ip address on your workstation.
You could also keep it set as localhost and make an SSH tunnel to access the page. I do that with some of my servers that I don't want the web interface to be completely open.
-
When I put my IP address in the "allow from" fields replacing localhost the page completely fails to load.
-
I'm comfortable with the phpMyAdmin being accessible on the LAN. I have no issues with that.
But all of the documentation I'm able to find seems to not go this route. For security reasons I assume.
-
@DustinB3403 You're not getting a "You don't have permission to access this page." error now?
Since you don't mind it being available on the LAN, change all the 'Order Deny,Allow' to 'Order Allow,Deny' and each 'Deny from All' to 'Allow from All'.
I've never actually used a separate .conf file for phpmyadmin. You could probably make this work, but you'd need to configure proxy and reverse proxy to get that setup working correctly. It's like they went and locked it down to the point of being unusable.
-
Ok I got that resolved and now I'm signed in. Followed this here to get it going.
-
@DustinB3403 said in Install LAMP phpMyAdmin and MariaDB into CentOS7:
Ok I got that resolved and now I'm signed in. Followed this here to get it going.
Looks like a much better guide.
-
Forward progress!
-
phpMyAdmin is just another website, there isn't anything unique about it. Don't think of it as something special.
-
Stalled... it appears CentOS has some restrictions in place that don't allow the website to get updated.
So investigating this issue now..
-
@DustinB3403 At least that error tells you how to go fix things.
-
@travisdh1 said in Install LAMP phpMyAdmin and MariaDB into CentOS7:
@DustinB3403 At least that error tells you how to go fix things.
Kind of, I've set the permissions on the file in question, and no dice.
-
Remember if you have SELinux turned on you're going to need to change the type for all of those files.
-
@stacksofplates said in Install LAMP phpMyAdmin and MariaDB into CentOS7:
Remember if you have SELinux turned on you're going to need to change the type for all of those files.
selinux is on by default.
What do you mean "change the type for all of those files" ?
-
@DustinB3403 said in Install LAMP phpMyAdmin and MariaDB into CentOS7:
@travisdh1 said in Install LAMP phpMyAdmin and MariaDB into CentOS7:
@DustinB3403 At least that error tells you how to go fix things.
Kind of, I've set the permissions on the file in question, and no dice.
Either file permissions in the rest of the phpmyadmin folder, of selinux permissions problems. My first guess is normally selinux in these cases.
semanage fcontext -a -t httpd_sys_rw_content_t '/path/to/phpmyadmin(/.*)?' -
@DustinB3403 said in Install LAMP phpMyAdmin and MariaDB into CentOS7:
@stacksofplates said in Install LAMP phpMyAdmin and MariaDB into CentOS7:
Remember if you have SELinux turned on you're going to need to change the type for all of those files.
selinux is on by default.
What do you mean "change the type for all of those files" ?
You have to change the SELinux context type for the files in apache directory. By default the context should be httpd_sys_rw_content_t.
If you do an ls -lZ on the directory all of the files are in it will show you the context type.
-
I ran this, and was able to get past the above error.
chcon -R -t httpd_sys_rw_content_t /var/www/html/ -
you can also do a
chcon -R --reference=/var/www/html <directory you need to change>but remember if you just use chcon it can be reversed with restorecon to the bad types. I usually use this as a quick test to make sure it works. Then I'll use semanage to permanently change the context. -
Just turn of SELinux and make sure it all works before you change contexts.
setenforce 0then if it all works, change contexts and turn it back on and test.
-
I'm with Jared, turning SELinux off during testing and installation is fine. Just make sure it is there before you start using the box.
