Форум Сайтостроение Администрирование серверов

проблема с phpmyadmin

K5
На сайте с 21.07.2010
Offline
209
kgtu5
7103

vps (1Гб, 1,5Ггц, centos 6): nginx+apache, mysql, ispmanager lite - все установлено из панели (с небольшими танцами)

не могу пробиться в phpmyadmin

при обращении к https://домен1/myadmin в логах было это:

"/usr/share/phpMyAdmin/myadmin/index.php" is not found

лишнее в ссылке myadmin, это решилось созданием ссылки

ln -s /usr/share/phpMyAdmin /usr/share/phpMyAdmin/myadmin

теперь в логах чисто, но при обращении к https://домен1/myadmin вылезает 403 ошибка:

You don't have permission to access /myadmin/ on this server

как решить???

P.S. какая еще инфа нужна для решения???

P.P.S конфиги ниже

---------- Добавлено 04.04.2012 в 10:46 ----------

конфиг nginx:


user nginx;
worker_processes 1;
worker_rlimit_nofile 100000;

error_log /var/log/nginx/error.log;
#error_log /var/log/nginx/error.log notice;
#error_log /var/log/nginx/error.log info;

pid /var/run/nginx.pid;

events {
worker_connections 1024;
use epoll;
}

http {
include /etc/nginx/mime.types;
default_type application/octet-stream;
server_tokens off;

log_format main '$remote_addr - $remote_user [$time_local] "$request" '
'$status $body_bytes_sent "$http_referer" '
'"$http_user_agent" "$http_x_forwarded_for"';

access_log /var/log/nginx/access.log main;

client_header_timeout 3m;
client_body_timeout 3m;
send_timeout 3m;

client_header_buffer_size 1k;
large_client_header_buffers 4 4k;

gzip on;
gzip_min_length 1100;
gzip_buffers 4 8k;
gzip_types text/plain;
#limit_conn_zone $binary_remote_addr zone=addr:10m;

output_buffers 1 32k;
postpone_output 1460;

sendfile on;
tcp_nopush on;
tcp_nodelay on;
#send_lowat 12000;

keepalive_timeout 75 20;

#lingering_time 30;
#lingering_timeout 10;
#reset_timedout_connection on;

#limit_conn_zone $binary_remote_addr zone=addr:10m;

#gzip on;

#
# The default server
#
log_format isp '$bytes_sent $request_length';
server {
server_name домен1 www.домен1;
listen адрес;
location ~* ^.+\.(jpg|jpeg|gif|png|svg|js|css|mp3|ogg|mpe?g|avi|zip|gz|bz2?|rar|swf)$ {
root /var/www/юзер1/data/www/домен1;
access_log /var/www/nginx-logs/юзер1 isp;
access_log /var/www/httpd-logs/домен1.access.log ;
error_page 404 = @fallback;
}
location / {
proxy_pass http://127.0.0.1:8080;
proxy_redirect off;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Real-IP $remote_addr;
}
location ~* ^/(webstat|awstats|webmail)/ {
proxy_pass http://127.0.0.1:8080;
proxy_redirect off;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Real-IP $remote_addr;
}
location @fallback {
proxy_pass http://127.0.0.1:8080;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Real-IP $remote_addr;
}
location ~ /\.ht {
deny all;
}
# redirect server error pages to the static page /40x.html
#error_page 404 /404.html;
#location = /404.html {
# root /usr/share/nginx/html;
#}
# redirect server error pages to the static page /50x.html
#error_page 500 502 503 504 /50x.html;
#location = /50x.html {
# root /usr/share/nginx/html;
#}
include /usr/local/ispmgr/etc/nginx.inc;
}
server {
server_name домен2 www.домен2.ru;
listen адрес;
location ~* ^.+\.(jpg|jpeg|gif|png|svg|js|css|mp3|ogg|mpe?g|avi|zip|gz|bz2?|rar|swf)$ {
root /var/www/юзер2/data/www/домен2;
access_log /var/www/nginx-logs/юзер2 isp;
access_log /var/www/httpd-logs/домен2.access.log ;
error_page 404 = @fallback;
}
location / {
proxy_pass http://127.0.0.1:8080;
proxy_redirect off;
# proxy_redirect http://127.0.0.1:8080/ /;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Real-IP $remote_addr;
}
location ~* ^/(webstat|awstats|webmail)/ {
proxy_pass http://127.0.0.1:8080;
proxy_redirect off;
# proxy_redirect http://127.0.0.1:8080/ /;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Real-IP $remote_addr;
}
location @fallback {
proxy_pass http://127.0.0.1:8080;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Real-IP $remote_addr;
}
location ~ /\.ht {
deny all;
}
include /usr/local/ispmgr/etc/nginx.inc;
}


server {
server_name myadmin;
listen 80;
access_log /var/log/nginx/localhost.access_log main;
error_log /var/log/nginx/localhost.error_log info;
location / {
root /usr/share/phpMyAdmin/;
# alias /usr/share/phpMyAdmin/;
index index.php;
# access_log /var/log/nginx/phpmyadmin_access main;
# error_log /var/log/nginx/phpmyadmin_error;
}
location ~^/(.+\.php)$ {
proxy_pass http://127.0.0.1:8080;
proxy_redirect off;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Real-IP $remote_addr;
allow all;
# proxy_connect_timeout 60;
# proxy_send_timeout 60;
# proxy_read_timeout 90;
}
# location ~ /\.ht {
# deny all;
# }
# include /usr/local/ispmgr/etc/nginx.inc;
}

server {
server_name myadmin;
listen 443;
ssl on;
ssl_certificate /etc/ssl/certs/домен1.crt;
ssl_certificate_key /etc/ssl/private/домен1.key;
ssl_session_timeout 1m;
ssl_protocols SSLv2 SSLv3 TLSv1;
access_log /var/log/nginx/localhost_ssl.access_log main;
error_log /var/log/nginx/localhost_ssl.error_log info;
location / {
root /usr/share/phpMyAdmin/;
# alias /usr/share/phpMyAdmin/;
index index.php;
# access_log /var/log/nginx/phpmyadmin_access main;
# error_log /var/log/nginx/phpmyadmin_error;
}
location ~ ^/(.+\.php)$ {
proxy_pass http://127.0.0.1:443;
proxy_redirect off;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Real-IP $remote_addr;
allow all;
# proxy_connect_timeout 60;
# proxy_send_timeout 60;
# proxy_read_timeout 90;
}
# location ~ /\.ht {
# deny all;
# }
# include /usr/local/ispmgr/etc/nginx.inc;
}



# Load config files from the /etc/nginx/conf.d directory
include /etc/nginx/conf.d/*.conf;
include /usr/local/ispmgr/etc/nginx.domain;
client_max_body_size 32M;
}

аська 45два48499два записки на работе (http://memoryhigh.ru) помогу с сайтом, удалю вирусы, настрою впс -> отзывы ТУТ (/ru/forum/836248) и ТАМ (http://www.maultalk.com/topic140187.html) !!!всегда проверяйте данные людей, которые сами пишут вам в аську или скайп!!!
K5
На сайте с 21.07.2010
Offline
209
kgtu5
#1

конфиг apache:



ServerTokens OS
ServerRoot "/etc/httpd"
PidFile run/httpd.pid
Timeout 60
KeepAlive On
MaxKeepAliveRequests 100
KeepAliveTimeout 10
<IfModule prefork.c>
StartServers 1
MinSpareServers 1
MaxSpareServers 10
ServerLimit 50
MaxClients 50
MaxRequestsPerChild 4000
</IfModule>
<IfModule worker.c>
StartServers 4
MaxClients 300
MinSpareThreads 25
MaxSpareThreads 75
ThreadsPerChild 25
MaxRequestsPerChild 0
</IfModule>
Listen 127.0.0.1:8080
LoadModule auth_basic_module modules/mod_auth_basic.so
LoadModule auth_digest_module modules/mod_auth_digest.so
LoadModule authn_file_module modules/mod_authn_file.so
LoadModule authn_alias_module modules/mod_authn_alias.so
LoadModule authn_anon_module modules/mod_authn_anon.so
LoadModule authn_dbm_module modules/mod_authn_dbm.so
LoadModule authn_default_module modules/mod_authn_default.so
LoadModule authz_host_module modules/mod_authz_host.so
LoadModule authz_user_module modules/mod_authz_user.so
LoadModule authz_owner_module modules/mod_authz_owner.so
LoadModule authz_groupfile_module modules/mod_authz_groupfile.so
LoadModule authz_dbm_module modules/mod_authz_dbm.so
LoadModule authz_default_module modules/mod_authz_default.so
LoadModule ldap_module modules/mod_ldap.so
LoadModule authnz_ldap_module modules/mod_authnz_ldap.so
LoadModule include_module modules/mod_include.so
LoadModule log_config_module modules/mod_log_config.so
LoadModule logio_module modules/mod_logio.so
LoadModule env_module modules/mod_env.so
LoadModule ext_filter_module modules/mod_ext_filter.so
LoadModule mime_magic_module modules/mod_mime_magic.so
LoadModule expires_module modules/mod_expires.so
LoadModule deflate_module modules/mod_deflate.so
LoadModule headers_module modules/mod_headers.so
LoadModule usertrack_module modules/mod_usertrack.so
LoadModule setenvif_module modules/mod_setenvif.so
LoadModule mime_module modules/mod_mime.so
LoadModule dav_module modules/mod_dav.so
LoadModule status_module modules/mod_status.so
LoadModule autoindex_module modules/mod_autoindex.so
LoadModule info_module modules/mod_info.so
LoadModule dav_fs_module modules/mod_dav_fs.so
LoadModule vhost_alias_module modules/mod_vhost_alias.so
LoadModule negotiation_module modules/mod_negotiation.so
LoadModule dir_module modules/mod_dir.so
LoadModule actions_module modules/mod_actions.so
LoadModule speling_module modules/mod_speling.so
LoadModule userdir_module modules/mod_userdir.so
LoadModule alias_module modules/mod_alias.so
LoadModule substitute_module modules/mod_substitute.so
LoadModule rewrite_module modules/mod_rewrite.so
LoadModule proxy_module modules/mod_proxy.so
LoadModule proxy_balancer_module modules/mod_proxy_balancer.so
LoadModule proxy_ftp_module modules/mod_proxy_ftp.so
LoadModule proxy_http_module modules/mod_proxy_http.so
LoadModule proxy_ajp_module modules/mod_proxy_ajp.so
LoadModule proxy_connect_module modules/mod_proxy_connect.so
LoadModule cache_module modules/mod_cache.so
LoadModule suexec_module modules/mod_suexec.so
LoadModule disk_cache_module modules/mod_disk_cache.so
LoadModule cgi_module modules/mod_cgi.so
LoadModule version_module modules/mod_version.so
Include conf.d/*.conf
User apache
Group apache
ServerAdmin root@localhost
UseCanonicalName Off
DocumentRoot "/var/www/html"
<Directory />
Options FollowSymLinks
AllowOverride None
</Directory>
<Directory "/var/www/html">
Options Indexes FollowSymLinks
AllowOverride None
Order allow,deny
Allow from all
</Directory>
<IfModule mod_userdir.c>
UserDir disabled
</IfModule>
DirectoryIndex index.html index.html.var
AccessFileName .htaccess
<Files ~ "^\.ht">
Order allow,deny
Deny from all
Satisfy All
</Files>
TypesConfig /etc/mime.types
DefaultType text/plain
<IfModule mod_mime_magic.c>
# MIMEMagicFile /usr/share/magic.mime
MIMEMagicFile conf/magic
</IfModule>
HostnameLookups Off
ErrorLog logs/error_log
LogLevel warn
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
LogFormat "%h %l %u %t \"%r\" %>s %b" common
LogFormat "%{Referer}i -> %U" referer
LogFormat "%{User-agent}i" agent
CustomLog logs/access_log combined
ServerSignature On
Alias /icons/ "/var/www/icons/"
<Directory "/var/www/icons">
Options Indexes MultiViews FollowSymLinks
AllowOverride None
Order allow,deny
Allow from all
</Directory>
<IfModule mod_dav_fs.c>
# Location of the WebDAV lock database.
DAVLockDB /var/lib/dav/lockdb
</IfModule>
ScriptAlias /cgi-bin/ "/var/www/cgi-bin/"
<Directory "/var/www/cgi-bin">
AllowOverride None
Options None
Order allow,deny
Allow from all
</Directory>
IndexOptions FancyIndexing VersionSort NameWidth=* HTMLTable Charset=UTF-8
AddIconByEncoding (CMP,/icons/compressed.gif) x-compress x-gzip
AddIconByType (TXT,/icons/text.gif) text/*
AddIconByType (IMG,/icons/image2.gif) image/*
AddIconByType (SND,/icons/sound2.gif) audio/*
AddIconByType (VID,/icons/movie.gif) video/*
AddIcon /icons/binary.gif .bin .exe
AddIcon /icons/binhex.gif .hqx
AddIcon /icons/tar.gif .tar
AddIcon /icons/world2.gif .wrl .wrl.gz .vrml .vrm .iv
AddIcon /icons/compressed.gif .Z .z .tgz .gz .zip
AddIcon /icons/a.gif .ps .ai .eps
AddIcon /icons/layout.gif .html .shtml .htm .pdf
AddIcon /icons/text.gif .txt
AddIcon /icons/c.gif .c
AddIcon /icons/p.gif .pl .py
AddIcon /icons/f.gif .for
AddIcon /icons/dvi.gif .dvi
AddIcon /icons/uuencoded.gif .uu
AddIcon /icons/script.gif .conf .sh .shar .csh .ksh .tcl
AddIcon /icons/tex.gif .tex
AddIcon /icons/bomb.gif core
AddIcon /icons/back.gif ..
AddIcon /icons/hand.right.gif README
AddIcon /icons/folder.gif ^^DIRECTORY^^
AddIcon /icons/blank.gif ^^BLANKICON^^
DefaultIcon /icons/unknown.gif
ReadmeName README.html
HeaderName HEADER.html
IndexIgnore .??* *~ *# HEADER* README* RCS CVS *,v *,t
AddLanguage ru .ru
AddLanguage sv .sv
AddLanguage zh-CN .zh-cn
AddLanguage zh-TW .zh-tw
LanguagePriority en ca cs da de el eo es et fr he hr it ja ko ltz nl nn no pl pt pt-BR ru sv zh-CN zh-TW
ForceLanguagePriority Prefer Fallback
AddDefaultCharset UTF-8
AddType application/x-compress .Z
AddType application/x-gzip .gz .tgz
AddType application/x-x509-ca-cert .crt
AddType application/x-pkcs7-crl .crl
AddHandler type-map var
AddType text/html .shtml
AddOutputFilter INCLUDES .shtml
Alias /error/ "/var/www/error/"
<IfModule mod_negotiation.c>
<IfModule mod_include.c>
<Directory "/var/www/error">
AllowOverride None
Options IncludesNoExec
AddOutputFilter Includes html
AddHandler type-map var
Order allow,deny
Allow from all
LanguagePriority en es de fr
ForceLanguagePriority Prefer Fallback
</Directory>
<Directory /var/www/*/data/>
php_admin_flag engine off
</Directory>
</IfModule>
</IfModule>
BrowserMatch "Mozilla/2" nokeepalive
BrowserMatch "MSIE 4\.0b2;" nokeepalive downgrade-1.0 force-response-1.0
BrowserMatch "RealPlayer 4\.0" force-response-1.0
BrowserMatch "Java/1\.0" force-response-1.0
BrowserMatch "JDK/1\.0" force-response-1.0
BrowserMatch "Microsoft Data Access Internet Publishing Provider" redirect-carefully
BrowserMatch "MS FrontPage" redirect-carefully
BrowserMatch "^WebDrive" redirect-carefully
BrowserMatch "^WebDAVFS/1.[0123]" redirect-carefully
BrowserMatch "^gnome-vfs/1.0" redirect-carefully
BrowserMatch "^XML Spy" redirect-carefully
BrowserMatch "^Dreamweaver-WebDAV-SCM1" redirect-carefully

Include /usr/local/ispmgr/etc/ispmgr.inc
<Directory /usr/share/phpMyAdmin>
Order Deny,Allow
Deny from all
Allow from 127.0.0.1
</Directory>
<Directory /var/www/юзер1/data/www/домен1>
Options -ExecCGI -Includes
php_admin_value open_basedir "/var/www/юзер1/data:."
php_admin_flag engine on
</Directory>
<Directory /var/www/юзер2/data/www/домен2>
Options -ExecCGI -Includes
php_admin_value open_basedir "/var/www/юзер2/data:."
php_admin_flag engine on
</Directory>

NameVirtualHost 127.0.0.1:8080
<VirtualHost 127.0.0.1:8080 >
ServerName домен1
CustomLog /var/www/httpd-logs/домен1.access.log combined
DocumentRoot /var/www/юзер1/data/www/домен1
ErrorLog /var/www/httpd-logs/домен1.error.log
ServerAdmin webmaster@домен1
ServerAlias www.домен1
SuexecUserGroup юзер1 юзер1
AddType application/x-httpd-php .php .php3 .php4 .php5 .phtml
AddType application/x-httpd-php-source .phps
php_admin_value open_basedir "/var/www/юзер1/data:."
php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f webmaster@юзер1"
php_admin_value upload_tmp_dir "/var/www/юзер1/data/mod-tmp"
php_admin_value session.save_path "/var/www/юзер1/data/mod-tmp"
</VirtualHost>
<VirtualHost 127.0.0.1:8080 >
ServerName домен2
CustomLog /var/www/httpd-logs/домен2.access.log combined
DocumentRoot /var/www/юзер2/data/www/proremontpola.ru
ErrorLog /var/www/httpd-logs/домен2.error.log
ServerAdmin webmaster@домен2
ServerAlias www.домен2
SuexecUserGroup юзер2 юзер2
AddType application/x-httpd-php .php .php3 .php4 .php5 .phtml
AddType application/x-httpd-php-source .phps
php_admin_value open_basedir "/var/www/юзер2/data:."
php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f webmaster@домен2"
php_admin_value upload_tmp_dir "/var/www/юзер2/data/mod-tmp"
php_admin_value session.save_path "/var/www/юзер2/data/mod-tmp"
</VirtualHost>

<VirtualHost 127.0.0.1:443 >
ServerName myadmin
ServerAdmin admin@localhost
ProxyRequests Off
<Proxy *>
Order deny,allow
Allow from all
</Proxy>
ProxyPreserveHost On
ProxyTimeout 60000
CustomLog /var/www/httpd-logs/myadmin.access.log combined
DocumentRoot /usr/share/phpMyAdmin
ErrorLog /var/www/httpd-logs/myadmin.error.log
</VirtualHost>

Andreyka
На сайте с 19.02.2005
Offline
822
Andreyka
#2

Поправь путь к phpmyadmin в конфиге

Не стоит плодить сущности без необходимости
K5
На сайте с 21.07.2010
Offline
209
kgtu5
#3
Andreyka:
Поправь путь к phpmyadmin в конфиге

в котором месте???

M
На сайте с 01.12.2009
Offline
235
madoff
#4
Andreyka:
Поправь путь к phpmyadmin в конфиге

Andreyka Скажи TC в "каком месте ему надо поправить" 😂

p.s интеллектуально оно думать не может ;)

Администратор Linux,Freebsd. построения крупных проектов.
Andreyka
На сайте с 19.02.2005
Offline
822
Andreyka
#5

В том, где прописан неверный путь разумеется

K5
На сайте с 21.07.2010
Offline
209
kgtu5
#6

ладно, поглумились и будет, сами также начинали, них... всмысле ничего незнаючи... ваше поправь путь ничего не дало...

пока что дошло до такого состояния (ошибка 400):


2012/04/04 14:02:26 [info] 1922#0: *3 client sent plain HTTP request to HTTPS port while reading client request headers, client: 127.0.0.1, server: myadmin, request: "GET /myadmin/ HTTP/1.0", host: "домен1"
2012/04/04 14:02:29 [info] 1922#0: *4 peer closed connection in SSL handshake while SSL handshaking, client: 109.236.220.18, server: myadmin
2012/04/04 14:02:29 [info] 1922#0: *5 peer closed connection in SSL handshake while SSL handshaking, client: 109.236.220.18, server: myadmin
2012/04/04 14:02:30 [info] 1922#0: *8 client sent plain HTTP request to HTTPS port while reading client request headers, client: 127.0.0.1, server: myadmin, request: "GET /myadmin/ HTTP/1.0", host: "домен1"

на просторах пишут это:


Такая ошибка обычно встречается, если у вас криво настроен редирект на порт https. Если вы с этим столкнулись, то наверняка пытаетесь получить доступ к phpmyadmin после авторизации Решается это следующим образом:
location ~ \.php$ {
fastcgi_param HTTPS on;
.....

это касательно fastcgi+nginx

как написать правильный локейшн для связки apache+nginx???

как исправить это:


server {
server_name myadmin;
listen 443;
keepalive_timeout 70;
ssl on;
ssl_protocols SSLv2 SSLv3 TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers AES128-SHA:AES256-SHA:RC4-SHA:DES-CBC3-SHA:RC4-MD5;
ssl_certificate /etc/ssl/certs/домен1.crt;
ssl_certificate_key /etc/ssl/private/домен1.key;
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 5m;
access_log /var/log/nginx/localhost_ssl.access_log main;
error_log /var/log/nginx/localhost_ssl.error_log info;
location / {
# root /usr/share/phpMyAdmin/;
alias /usr/share/phpMyAdmin/;
index index.php;
# access_log /var/log/nginx/phpmyadmin_access main;
# error_log /var/log/nginx/phpmyadmin_error;
}
location ~* ^/(.+\.php)$ {
proxy_pass http://127.0.0.1:443;
proxy_redirect off;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Real-IP $remote_addr;
allow all;
# proxy_connect_timeout 60;
# proxy_send_timeout 60;
# proxy_read_timeout 90;
}
# location ~ /\.ht {
# deny all;
# }
# include /usr/local/ispmgr/etc/nginx.inc;
}
Andreyka
На сайте с 19.02.2005
Offline
822
Andreyka
#7

Или неправильно поправил путь или забыл рестартануть сервис

Авторизуйтесь или зарегистрируйтесь, чтобы оставить комментарий