Web Hosting Talk : Web Hosting Main Forums : Hosting Security and Technology : apache not able to connect to mysql using ip on same server

[jsxtech]

apache not able to connect to mysql using ip on same server

I'm also having a issue with mysql database server and apache web server running php.

I'm using apache php to connect to mysql using IP as db host on the same server,
but when I use localhost as db host - it works.

[RyanD]

that would be because your mysql user is probably only authorized to connect from local host.

You should always be using LO and not an IP bound to an Ethernet interface for scripts on the server.

[jsxtech]

I've dedicated server, can you tell me - what files/settings needs to be changed?
I've already stopped the firewall on the server.

[petteyg359]

Originally Posted by jsxtech

I've dedicated server, can you tell me - what files/settings needs to be changed?
I've already stopped the firewall on the server.

First, turn the firewall back on.

[ColoUnlimited]

Try "telnet <ip> 3306" If you're getting a connection refused, you'll need to modify your my.cnf and modify the bind-address statement so mysql will answer on the IP address.

As Ryan said though, using localhost only is best if you're not going to connect to the mysql server from a remote machine.

[jsxtech]

ya, did already - firewall is up again.

[jsxtech]

I want to access this mysql database server from other server as well.
But the first thing is - apache not able to connect to mysql using ip on same server.

I've checked my /etc/my.cnf, there is no line for bind-address.

[chennaihomie]

What script you are using? Try using localhost instead of server IP

[ColoUnlimited]

Is there a skip-networking statement in there? If so, comment it out.

What version of mysql are you running?

[jNive]

like mentioned above there are 2 steps in the process, determining whether MySQL is listening on anything other than localhost (lo) first - then ensuring that database users that are added/configured are done so for the correct host ip address.

The listening/networking parts can be determined/verified by netstat -ln and using telnet to port 3306 from the various remote hosts that will be connecting. Make sure that you allow only explicit ips access to destination port 3306 via iptables on your database server

[jsxtech]

There is no - skip-networking statement in /etc/my.cnf file.

One more thing - firewall is CSF not iptables.

Can anyone help with CSF also?

[petteyg359]

Originally Posted by jsxtech

There is no - skip-networking statement in /etc/my.cnf file.

One more thing - firewall is CSF not iptables.

Can anyone help with CSF also?

CSF is not a firewall. CSF is a configuration utility/script that makes iptables management somewhat easier. Rather than putting port 3306 in the allow lists in csf.conf, just add the IPs of any other server you want to allow to connect into csf.allow.

[jsxtech]

I've already added the IP in csf.allow, but still no luck

[petteyg359]

Did you restart CSF? iptables rules aren't reloaded until you tell it to do so.
Also, as jNive said, have you added a database user with that IP allowed for login?

[jNive]

mysql> CREATE USER 'someusername'@'ip.add.re.ss' WITH PASSWORD 'somereallycleverpassword';
mysql> GRANT ALL on adatabasename.* TO 'someusername'@'ip.add.re.ss';
mysql> flush privileges;


quick set of mysql commands for adding users & granting all permissions