Recent Posts

41

Koozali SME Server 10.x / Re: Remote Access to MariaDB

« Last post by ReetP on July 21, 2025, 02:12:29 PM »

Or write/use apps direct on the server itself.

I'm sure there are plenty of applications out there that you could use.

If you mention specifics eg I think you said some sort of library system? other users may have some suggestions.

42

Koozali SME Server 10.x / Re: Remote Access to MariaDB

« Last post by mmccarn on July 21, 2025, 01:57:52 PM »

Can you teach me how to open port 3306?

CAVEAT: I HAVE NOT DONE THIS FOR YEARS, BUT THE PROCEDURE BELOW *MAY* DO WHAT YOU WANT...

mariadb connections use sockets by default, which do not allow remote connectivity.

* Allow mariadb to communicate using networking (but only from the server for now, to maintain security)

Code: [Select]

config setprop mariadb AllowHosts 127.0.0.1 LocalNetworkingOnly no port 3306
signal-event post-upgrade; signal-event reboot

* Use an ssh tunnel from your workstation to the sme server:
(I do this using cygwin on windows, but windows11 may already include OpenSSH)

Code: [Select]

ssh -L3306:127.0.0.1:3306 <user>@<sme-server>(-L <local port to listen on>:<ip or systemname as it appears to the remote system>:<remote port>)

* Then configure the tools on your workstation to talk to "localhost:3306" instead of directly to the SME server.

Performance is likely to take a hit, but if it works you can research how to configure mariadb for secure connections.  Mariadb "secure connections overview"

43

Koozali SME Server 10.x / Re: Remote Access to MariaDB

« Last post by isotropic on July 21, 2025, 01:02:55 AM »

Hello, ReetP, good evening.
I just want to set up a basic IT department at the school where I study.
An internal network. 192.168.160.0. That's it. No external access.
To allow file sharing among teachers.
On this network, with Tomcat and MySQL, I can develop small applications to help it run smoothly. Things like student registration. Library book registration.
Things like that. Very basic. No external access.
Cheers.

44

Koozali SME Server 10.x / Re: Remote Access to MariaDB

« Last post by isotropic on July 21, 2025, 12:52:36 AM »

Good evening, gentlemen.
 Jean-Philippe Pialasse, ReetP...
I've read and reread your messages and realized my mistake: I shouldn't allow remote access to MySQL. It's really very dangerous.
Thank you for the advice.
Safety always comes first!
Best regards.

45

Koozali SME Server 10.x / Re: Remote Access to MariaDB

« Last post by ReetP on July 20, 2025, 05:28:45 PM »

^^^^^^^^^^^^^^^^

What he said. As el Presidente, Head Honcho y el Jefe, he knows a bit

Better to describe exactly what you are building and maybe we can help.

46

Koozali SME Server 10.x / Re: Remote Access to MariaDB

« Last post by Jean-Philippe Pialasse on July 20, 2025, 05:05:52 PM »

be aware that even if you enable access only on lan, access mariadb this way is by default in clear.

meaning anyone on the network can recover your username and password and see your data.

if you open access to the network you need also to manually configure encryption for mariadb and your user and force your user to only connect with encryption. 
this is a lot of work to manually configure and you need to consult mariadb documentation to do that as this is not implemented in SME. 

also do use a dedicated user with only access to one db. 

47

General Discussion / Re: Koozali SME Server v11 2025-07-15 - view from the coalface

« Last post by ReetP on July 20, 2025, 11:28:15 AM »

Such is the nature of development, and also why we need as many eyes on as possible.

Don't be shy. Help us.

48

General Discussion / Re: Koozali SME Server v11 2025-07-15 - view from the coalface

« Last post by TerryF on July 20, 2025, 09:43:50 AM »

Beta was looking great but thanks to a couple of the boys chipping in found an issue that was a blocker and not picked up as believed was solved what seems an eon ago, thanks, Gary D and Ed B

The brains trust has been on it to confirm WTF was going on and more importantly developed the solution, the train gathers speed once again.

49

Koozali SME Server 10.x / Re: Remote Access to MariaDB

« Last post by isotropic on July 19, 2025, 02:00:19 PM »

When I say I want 'external access on port 3306,' I mean I intend to access MariaDB on a Windows computer, where I work best. With this access, I can create application tables using a front-end like MySQL-Front. But always on the internal network. Within the limits of 192.168.160.0.

50

Koozali SME Server 10.x / Re: Remote Access to MariaDB

« Last post by isotropic on July 19, 2025, 01:49:10 PM »

To answer your question:
I only want an internal network. 192.168.160.0. That's it. No external access.
On this network, with Tomcat and MySQL, I can install small applications to help with its operation. Things like student registration. Books in the library. Things like that. No external access. A completely internal network.

I'm very happy and gratified to have discovered SME Server. And I intend to participate more actively. Since I don't have enough knowledge to help with development, I intend to participate in testing. Or even through donations.
I want to thank you for the help I'm receiving. And I want to say that I would never try to jeopardize the work I'm trying to develop.
Thank you.