• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

How To install MySQL on Pfsense 2.4.5-RELEASE-p1

Scheduled Pinned Locked Moved Captive Portal
21 Posts 4 Posters 4.3k Views 3 Watching
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • O Offline
    ontzuevanhussen @Gertjan
    last edited by Jun 18, 2020, 11:09 PM

    @Gertjan I use mariadb:
    Screen Shot 2020-06-19 at 06.07.58.png

    1 Reply Last reply Reply Quote 0
    • O Offline
      ontzuevanhussen @Gertjan
      last edited by Jun 18, 2020, 11:17 PM

      @Gertjan my ufw status on VPS :
      Screen Shot 2020-06-19 at 06.14.57.png

      1 Reply Last reply Reply Quote 0
      • O Offline
        ontzuevanhussen @Gertjan
        last edited by Jun 18, 2020, 11:25 PM

        @Gertjan This is my pfSense SQL configuration:
        Screen Shot 2020-06-19 at 06.22.53.png

        Screen Shot 2020-06-19 at 06.23.47.png

        Screen Shot 2020-06-19 at 06.24.02.png

        1 Reply Last reply Reply Quote 0
        • O Offline
          ontzuevanhussen @Gertjan
          last edited by Jun 19, 2020, 12:04 AM

          @Gertjan This my System logs on pfSense:
          Screen Shot 2020-06-19 at 07.03.28.png

          1 Reply Last reply Reply Quote 0
          • O Offline
            ontzuevanhussen @Gertjan
            last edited by Jun 19, 2020, 12:16 AM

            @Gertjan I have create user and allow from remote access my database:
            Screen Shot 2020-06-19 at 07.13.47.png

            1 Reply Last reply Reply Quote 0
            • G Offline
              Gertjan
              last edited by Gertjan Jun 19, 2020, 7:34 AM Jun 19, 2020, 7:31 AM

              First image :

              ce62d87e-74ea-475b-9fe3-453f247cc50d-image.png

              Doesn't that ring a bell ?
              A service that is listening on address 127.0.0.1 can only be reached by the system itself. That's the defintion of localhost or 127.0.0.1.
              Everybody else, locally on a LAN ,and the Internet : negative.
              You have to listen (add) to address "0.0.0.0" which means all available IPv4 addresses.
              This will include the one you masked here :

              89177265-8af6-41e8-b36c-8f6c9ef6b0a6-image.png

              You should have a :
              tcp 0 0 0.0.0.0:3306 0.0.0.0:* LISTEN 13538/mysqld

              and of course, please, limit the access to this port with a firewall rule, so it accepts only traffic from your pfSense.
              If not, "you get hacked in no time", because the MySQL traffic is non intended to be exposed to the entire Internet.

              I'll leave it up to you to find the instruction to be placed into /etc/my.cnf so the mysql server daemon listens to 'everything'.

              No "help me" PM's please. Use the forum, the community will thank you.
              Edit : and where are the logs ??

              O 1 Reply Last reply Jun 19, 2020, 11:23 PM Reply Quote 0
              • O Offline
                ontzuevanhussen @Gertjan
                last edited by ontzuevanhussen Jun 19, 2020, 11:24 PM Jun 19, 2020, 11:23 PM

                @Gertjan Ok now it works well.
                Screen Shot 2020-06-19 at 21.04.49.png

                but table nas, radacct, radcheck, radgroupcheck, radgroupreply, radreply, and radusergroup is no data. why?

                1 Reply Last reply Reply Quote 0
                • G Offline
                  Gertjan
                  last edited by Gertjan Jun 20, 2020, 7:13 AM Jun 20, 2020, 7:12 AM

                  When you enable all "SQL" options :

                  58727c89-cda6-4d5e-8153-92a4ded8a815-image.png

                  only two tables get filled in with data from the Freeradius process :
                  radpostauth and radacct.

                  The radcheck, radgroupcheck should by filled in by you, using phpmyadmin.
                  Their content can not be modified from within pfSense.
                  As you have figured out : the users and passsword could have been placed also in a database table, but pfSense uses us a file on disk for this ( PackageFreeRADIUS > Users > Users )
                  The Freeradius package only exposes a (very) small part of all possible FreeRadius possibilities.
                  Most option are hard coded, and can't be changed using the pfSEnse GUI.

                  To get the idea, see this file : /usr/local/etc/raddb/sites-enabled/default and the entire directory /usr/local/etc/raddb/ (all files and folders).

                  What these tables do, how to fill them in, etc, there is only one way to find that out : https://freeradius.org/documentation/

                  Remember : MySQL (MariadDB) is actually doing nothing special. It's just the scratch pad area of FreeRadius.

                  "FreeRadius" is a complex thing.

                  No "help me" PM's please. Use the forum, the community will thank you.
                  Edit : and where are the logs ??

                  O 1 Reply Last reply Jun 21, 2020, 10:52 AM Reply Quote 0
                  • O Offline
                    ontzuevanhussen @Gertjan
                    last edited by Jun 21, 2020, 10:52 AM

                    @Gertjan Ok, I try to insert table Radcheck and radgroupcheck, like this:
                    Screen Shot 2020-06-21 at 17.50.59.png

                    Screen Shot 2020-06-21 at 17.51.25.png

                    Is that true? Can you help me again how to insert this table..

                    1 Reply Last reply Reply Quote 0
                    • G Offline
                      Gertjan
                      last edited by Jun 22, 2020, 5:30 AM

                      You can't.

                      To have FreeRadius use all the MySQL database tables, you have to modify /usr/local/etc/raddb/sites-enabled/default - and probably other files as well - which means you have to modify pfSense itself.
                      This means thorough FreeRadius knowledge and a good understanding about how pfSense makes the set up files.
                      If that was the case, you wouldn't ask question, you were just doing it.

                      No "help me" PM's please. Use the forum, the community will thank you.
                      Edit : and where are the logs ??

                      1 Reply Last reply Reply Quote 0
                      • S Offline
                        sapsin Banned
                        last edited by Jul 4, 2020, 6:12 AM

                        This post is deleted!
                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                          This community forum collects and processes your personal information.
                          consent.not_received