How to configure phpMyAdmin for httpd?

[gordon.f]

Good day,

TL,DR: Are my folders and httpd.conf file configured correctly?

I'm trying to build a website with a database. So I use httpd, PHP, and mariadb. I also would like to use phpMyAdmin. I downloaded phpMyAdmin with the code below

pkg_add phpMyAdmin

It located inside /var/www/phpmyadmin. I copied that folder to /var/www/htdocs/my_website.

ls /var/www/htdocs/my_website/
index.php phpmyadmin

So here is my configuration at /etc/httpd.conf

#[ MACROS ]
ext_ip = "127.0.0.1"

# [ SERVERS ]
server "default" {
    listen on $ext_ip port 80
    root "htdocs/my_website"
    directory index "index.php"

    location "/*.php*" { fastcgi socket "/run/php-fpm.sock" }
}

# [ TYPES ]
types {
    include "/usr/share/misc/mime.types"

after starting httpd, and the database, I entered this into the address bar:
"http://localhost/phpMyAdmin/index". But result was like this:

phpMyAdmin - Error

The mysqli extension is missing. Please check your PHP configuration. See our documentation for more information.

I couldn't find any information about httpd and phpMyAdmin on Google. So could you please guide me in order to use them correctly? Thanks in advance.

[jggimi]

You'll need to provision multiple tools to get this all working. Here's what I can determine right now, just from what you've posted so far:

• httpd.conf(5). Don't provision the loopback network interface as an "external" interface. You'll confuse us ... and possibly confuse yourself. The loopback network interface is an internal loop on your network stack. Hence its name. (Yes, OpenBSD can redirect traffic in and out of this pseudo network interface with pf(4), but let's not get tangled in those weeds. Please.)
• PHP. There are multiple versions of PHP in the ports/packages system. Each version requires installation and provisioning of matching-version "extensions" for select extended services. One of those extensions is php-mysqli, the MySQL / MariaDB database extension for PHP. It's missing, and needs to be both installed via pkg_add(1), and then provisioned via ln(1), as described in /usr/local/share/doc/pkg-readmes/php-<your installed release of php>.

[gordon.f]

Dear jggimi,

Thanks for the reply.

httpd.conf(5). Don't provision the loopback network interface as an "external" interface. You'll confuse us ... and possibly confuse yourself. The loopback network interface is an internal loop on your network stack. Hence its name. (Yes, OpenBSD can redirect traffic in and out of this pseudo network interface with pf(4), but let's not get tangled in those weeds. Please.)

Well, excuse my illiteracy on OpenBSD. I just found that working, so continued with that. If you can provide a code block in order to substitute it, that'd be great.

PHP. There are multiple versions of PHP in the ports/packages system. Each version requires installation and provisioning of matching-version "extensions" for select extended services. One of those extensions is php-mysqli, the MySQL / MariaDB database extension for PHP. It's missing, and needs to be both installed via pkg_add(1), and then provisioned via ln(1), as described in /usr/local/share/doc/pkg-readmes/php-<your installed release of php>.

mysqli is actually installed.

php-mysqli-7.3.28
php-mysqli-7.3.29
php-mysqli-7.3.30
php-mysqli-7.4.18
php-mysqli-7.4.19
php-mysqli-7.4.20
php-mysqli-7.4.21
php-mysqli-7.4.22
php-mysqli-7.4.23 (installed)
php-mysqli-8.0.10 (installed)
php-mysqli-8.0.5
php-mysqli-8.0.6
php-mysqli-8.0.7
php-mysqli-8.0.8
php-mysqli-8.0.9

and as you pointed out I did this:

ln -sf /etc/php-8.0.sample/mysqli.ini /etc/php-8.0/

The result is same as the former one.

My assumption is that there is a missing part in my httpd.conf file. If you ask me "how do you know that?", in the link below there is a configuration for nginx.
https://nixbsd.wordpress.com/2014/11...min-and-nginx/

Of course nginx and httpd could be different but it seems like I missed some part related to phpmyadmin in my httpd.conf file.

[jggimi]

Originally Posted by gordon.f

Well, excuse my illiteracy on OpenBSD.

This isn't an OpenBSD-ism. It's a telecommunications-ism. Specifically, the Internet Protocol, the "IP" of TCP/IP.

I just found that working, so continued with that. If you can provide a code block in order to substitute it, that'd be great.

Here's a unified diff with my recommendation to call it `$loopback` rather than `$ext_ip`.

--- yours       Sun May 29 06:17:25 2022
+++ mine        Sun May 29 06:18:25 2022
@@ -1,9 +1,9 @@
 #[ MACROS ]
-ext_ip = "127.0.0.1"
+loopback = "127.0.0.1"
 
 # [ SERVERS ]
 server "default" {
-    listen on $ext_ip port 80
+    listen on $loopback port 80
     root "htdocs/my_website"
     directory index "index.php"

mysqli is actually installed....and as you pointed out I did this:

ln -sf /etc/php-8.0.sample/mysqli.ini /etc/php-8.0/

The result is same as the former one....

My assumption, based on your reported error message, was a missing or incorrectly provisioned extension. Since you claim now that this is not the case, and that the extension is installed and correctly provisioned, do you have a working MariaDB server installed, provisioned, tested, and confirmed to be running?

[gordon.f]

Dear jggimi,

Thanks for the advice. I applied "loopback" variable.

do you have a working MariaDB server installed, provisioned, tested, and confirmed to be running?

Yes, I have tested it manually. From terminal I can reach to MariaDB server. I followed the instruction below.
https://blog.eldernode.com/install-m...-on-openbsd-7/

Anyways;

I applied all the things you've mentioned so far and they worked after a restart. I connected to localhost/phpMyAdmin. It directed me to login page. So it worked. But right now it seems that PHP is not working. I can reach to my html pages but can not reach to my php pages.

I did:

rcctl start httpd
rcctl start mysqld
rcctl start php80_fpm

But when I entered an address browser returns "File not found".


EDIT: I closed down the terminal and started all of the daemons again. Now server is working.

But there is an additional warning at localhost/phpMyAdmin

Warning in ./libraries/classes/Config.php#1761
mkdir(): Permission denied

Backtrace

./libraries/classes/Config.php#1761: mkdir(
string './tmp//twig',
integer 504,
boolean true,
)
./libraries/classes/Template.php#62: PhpMyAdmin\Config->getTempDir(string 'twig')
./libraries/classes/Template.php#102: PhpMyAdmin\Template->__construct(string 'login/header')
./libraries/classes/Plugins/Auth/AuthenticationCookie.php#111: PhpMyAdmin\Template::get(string 'login/header')
./libraries/classes/Plugins/AuthenticationPlugin.php#247: PhpMyAdmin\Plugins\Auth\AuthenticationCookie->showLoginForm()
./libraries/common.inc.php#353: PhpMyAdmin\Plugins\AuthenticationPlugin->authenticate()
./index.php#27: require_once(./libraries/common.inc.php)

[jggimi]

The php_fpm process does not have permission to create the temporary directory.

If I have time I will see if I can replicate the environment and warning.

[gordon.f]

Thanks a lot, appreciated.

[jggimi]

I've replicated the environment and have phpMyAdmin up and running with access to the MariaDB server, having created a database user and granted all privs.

I do not see "twig" in any log at this time. Where is the warning produced?

[jggimi]

I haven't heard from you regarding the warning.

Briefly, on a local virtual "lab" machine running OpenBSD 7.1-release, I:

1. Installed phpMyAdmin-5.1.3p0. This installed pkg_info php-8.0.18 and php-mysqli-8.0.18 as dependencies.
2. Installed mariadb-server-10.6.7p0v1.
3. Ran mysql_install_db(1) as root to create the initial database in /var/mysql.
4. Created the socket's directory structure and edited /etc/my.cnf as directed by /usr/local/share/doc/pkg-readmes/mariadb-server for chrooted daemons.
5. Enabled and started mysqld with rcctl(8).
6. Created a user and granted it all privileges with mysql(1), flushing privileges to enable immediate use.
7. Enabled the mysqli extension with ln(1) as directed by /usr/local/share/doc/pkg-readmes/php-8.0.
8. Enabled and started php80_fpm with rcctl(8).
9. Created a simple httpd.conf that directs all .php files through the php-fpm socket:

   server "lab" {
           listen on * port 80
           location "*.php" {
                   fastcgi socket "/run/php-fpm.sock"
           }
   }

10. Enabled and started httpd(8) with rcctl(8).
11. I created a short `info.php` file in /var/www/htdocs that calls phpinfo(), then connected with my browser to http://lab/info.php to confirm that PHP's fpm was running correctly and the mysqli extension was available.
12. Copied the /var/www/phpMyAdmin file structure to /var/www/htdocs.
13. Pointed my browser to http://lab/phpMyAdmin/index.php, and logged in with the user I'd created.

[gordon.f]

Dear jggimi,

Good day.

I haven't heard from you regarding the warning.

Yes, apologies. My system cannot handle Firefox as I have 1 GB's of RAM, sometimes it closes down Firefox. It's really frustrating. This is the only computer available these days. I was looking for a more capable hardware that's why I haven't replied soon.

Briefly, on a local virtual "lab" machine running OpenBSD 7.1-release, I:

Installed phpMyAdmin-5.1.3p0. This installed pkg_info php-8.0.18 and php-mysqli-8.0.18 as dependencies.
Installed mariadb-server-10.6.7p0v1.
Ran mysql_install_db(1) as root to create the initial database in /var/mysql.
Created the socket's directory structure and edited /etc/my.cnf as directed by /usr/local/share/doc/pkg-readmes/mariadb-server for chrooted daemons.
Enabled and started mysqld with rcctl(8).
Created a user and granted it all privileges with mysql(1), flushing privileges to enable immediate use.
Enabled the mysqli extension with ln(1) as directed by /usr/local/share/doc/pkg-readmes/php-8.0.
Enabled and started php80_fpm with rcctl(8).
Created a simple httpd.conf that directs all .php files through the php-fpm socket:
Code:

server "lab" {
listen on * port 80
location "*.php" {
fastcgi socket "/run/php-fpm.sock"
}
}

Enabled and started httpd(8) with rcctl(8).
I created a short `info.php` file in /var/www/htdocs that calls phpinfo(), then connected with my browser to http://lab/info.php to confirm that PHP's fpm was running correctly and the mysqli extension was available.
Copied the /var/www/phpMyAdmin file structure to /var/www/htdocs.
Pointed my browser to http://lab/phpMyAdmin/index.php, and logged in with the user I'd created.

I will check every step again and return the result.

[gordon.f]

Dear jggimi;

Please review my checklist below. I think, so far so good except for the fourth step.

Here is my OpenBSD version:

>>>uname -r 
6.9
>>>uname -a
OpenBSD "my_system" 6.9 GENERIC.MP#797 i386

1.Installed phpMyAdmin-5.1.3p0. This installed pkg_info php-8.0.18 and php-mysqli-8.0.18 as dependencies.

>>>pkg_info -Q phpmyadmin
phpMyAdmin-4.9.5p0 (installed)

2.Installed mariadb-server-10.6.7p0v1.

>>>pkg_info -Q mariadb 
mariadb-client-10.5.12p0v1 (installed)
mariadb-server-10.5.12p0v1 (installed)

3. Ran mysql_install_db(1) as root to create the initial database in /var/mysql.

>>>ls /var/mysql/                                                      
aria_log.00000001          ib_logfile0                onedb
aria_log_control           ibdata1                    performance_schema
"my_system".err		   ibtmp1                     test
"my_system".net.pid	   multi-master.info
ib_buffer_pool             mysql

4. Created the socket's directory structure

Didn't understand that part. Maybe I've already done that without knowing what I was doing. Could you please explain this further?

and edited /etc/my.cnf as directed by /usr/local/share/doc/pkg-readmes/mariadb-server for chrooted daemons.

>>>cat /etc/my.cnf                                                     
[client-server]
socket=/var/run/mysql/mysql.sock
port=3306

# This will be passed to all MariaDB clients
[client]
#password="my_password"

# The MariaDB server
[mysqld]
# To listen to all IPv4 network addresses, use "bind-address = 0.0.0.0"
bind-address=127.0.0.1
# Directory where you want to put your data
#data=/var/mysql
# This is the prefix name to be used for all log, error and replication files
#log-basename=mysqld
# Logging
#general-log
#slow_query_log

7. Enabled the mysqli extension with ln(1) as directed by /usr/local/share/doc/pkg-readmes/php-8.0.

>>>ln -sf ../php-8.0.sample/mysqli.ini /etc/php-8.0/

>>>ls /etc/php-8.0.sample/                                  
mysqli.ini      opcache.ini     pdo_mysql.ini

>>>ls /etc/php-8.0                                                     
mysqli.ini

9. Created a simple httpd.conf that directs all .php files through the php-fpm socket:

>>>cat /etc/httpd.conf                                                 
# $OpenBSD: httpd.conf,v 1.22 2020/11/04 10:34:18 denis Exp $


#[ MACROS ]
loopback = "127.0.0.1"

# [ SERVERS ]
server "default" {
    listen on $loopback port 80
    root "htdocs/my_website"
    directory index "index.php"

    location "/*.php*" { fastcgi socket "/run/php-fpm.sock" }
}

# [ TYPES ]
types {
    include "/usr/share/misc/mime.types"

11. I created a short `info.php` file in /var/www/htdocs that calls phpinfo(), then connected with my browser to http://lab/info.php to confirm that PHP's fpm was running correctly and the mysqli extension was available.

>>>cat test.php                                                        
<?php
phpinfo();

12. Copied the /var/www/phpMyAdmin file structure to /var/www/htdocs.

#COPIED /var/www/phpMyAdmin TO /var/www/htdocs/my_website/ 
>>>ls /var/www/htdocs/my_website/
first.php    index.html   index.php    phpinfo.php  test.php
first.php~   index.html~  phpMyAdmin   phpinfo.php~

[jggimi]

Clearly there are some differences -- I used the most recent release, and am using amd64, and you're on an i386 architecture with OpenBSD-6.9.

6.9 is no longer supported, by the way. It was end-of-life with the release of 7.1 earlier this year.

Per step 4, I followed the provisioning guidance in the pkg-readme:

chrooted daemons and MariaDB socket
===================================

For external program running under a chroot(8) to be able to access the
MariaDB server without using a network connection, the socket must be
placed inside the chroot.

e.g. httpd(8) or nginx(8): connecting to MariaDB from PHP
---------------------------------------------------------
Create a directory for the MariaDB socket:

    # install -d -m 0711 -o _mysql -g _mysql /var/www/var/run/mysql

Adjust /etc/my.cnf to use the socket in the chroot - this
applies to both client and server processes:

    [client-server]
    socket = /var/www/var/run/mysql/mysql.sock

[gordon.f]

Dear jggimi;

I didn't realize that system differences can affect like this way. Anyways thank you for help. If I upgrade my OS, I'll try again.


Also:

install -d -m 0711 -o _mysql -g _mysql /var/www/var/run/mysql

I ran that code. But there is still warning.

[jggimi]

Where is the warning produced? What are you doing to cause its appearance?

From your earlier post today, it appears that your MariaDB socket is outside the chroot.

[gordon.f]

Dear jggimi,

Warning is produced when you hit "http://localhost/phpMyAdmin". It brings the page for you to enter username and password. Also there is a dropdown menu that you can change the language. At the bottom of that page there is a warning panel. That's where the warning produced. Also if you enter username and password it brings "Access denied".

From your earlier post today, it appears that your MariaDB socket is outside the chroot.

Apologies if I cause you to repeat but I thought I followed every instruction. Am I missing something? Could you please address the missing step? How should I put MariaDB into the chroot'ed section?

[jggimi]

OK. I don't see that particular error in the browser window. I was looking for this in PHP logs and didn't see anything at all. I'm able to log on. I do have other warnings, about not having the curl extension provisioned, and about not having a tmp directory provisioned at /htdocs/phpMyAdmin/tmp. That's fine, I haven't provisioned these.

----

Correct your MariaDB socket. Above, you posted that your /etc/my.cnf file contains:

socket=/var/run/mysql/mysql.sock

That's outside the /var/www chroot where php-fpm and httpd both run. Correct your /etc/my.cnf -- review the pkg-readme excerpt I posted above, and note the socket= value is different. After correcting the configuration file, restart your mysqld daemon with # rcctl restart mysqld. See if you are then able to log in with the user and password you created.

[gordon.f]

Dear jggimi,

Now I got it. I've corrected my socket. Now there is a directory called "/var/run/mysql" under /var/www

>>>ls /var/www
acme       cache      conf       logs       phpMyAdmin tmp        var
bin        cgi-bin    htdocs     pear       run        usr

>>>ls /var/www/var/run/mysql/                                          
mysql.sock

>>>cat /etc/my.cnf                                                     
[client-server]
socket=/var/www/var/run/mysql/mysql.sock
port=3306

# This will be passed to all MariaDB clients
[client]
#password=my_password

# The MariaDB server
[mysqld]
# To listen to all IPv4 network addresses, use "bind-address = 0.0.0.0"
bind-address=127.0.0.1
# Directory where you want to put your data
#data=/var/mysql
# This is the prefix name to be used for all log, error and replication files
#log-basename=mysqld
# Logging
#general-log
#slow_query_log

I restarted mysqld, httpd, and php80_fpm but I still have the same warning message. It seems like I should upgrade my system then try again.

[jggimi]

Do you still get some sort of error message when you try to log on? Remember, I'm not there with you and can only see what you post.

Just in case you may need this, here's how I created a user with mysql(1):

# mysql
Welcome to the MariaDB monitor....

MariaDB [(none)]> CREATE USER 'jggimi'@'localhost' IDENTIFIED BY 'insertPasswordHere';
Query OK, 0 rows affected (0.015 sec)

MariaDB [(none)]> GRANT ALL PRIVILEGES ON *.* TO 'jggimi'@'localhost';
Query OK, 0 rows affected (0.005 sec)

MariaDB [(none)]> FLUSH PRIVILEGES;
Query OK, 0 rows affected (0.006 sec)

MariaDB [(none)]> quit; 

Bye

[gordon.f]

Dear jggimi;

Do you still get some sort of error message when you try to log on?

Yes, I do. Well, as you can see, I shared all my directories and conf files. Recently corrected socket directory in order work under chroot'ed section and corrected "/etc/my.conf" file according to it.

Just in case you may need this, here's how I created a user with mysql(1):

I tried this just now but when you hit "http://localhost/phpMyAdmin/index.php" browser returned "File not found."

[jggimi]

Originally Posted by gordon.f

I shared all my directories and conf files.

There is still room for error, because you post the output of "ls" but that's an incomplete view. You'll get a much clearer picture of files, directories, and structure within these filesystems using "ls -l" or "ls -lR". In particular, the extension links are easy to get wrong with ln(1) and sometimes the link errors are only obvious once checked with "ls -l". I know, because I've had this happen more than once.

I tried this just now but when you hit "http://localhost/phpMyAdmin/index.php" browser returned "File not found."

I can only guess it is your "root" statement in your httpd.conf. Compare your httpd.conf with my example, above. Which one is easier to read and which one is more complex?