I have multiserver setup and when I create DB I want to connect to it via PMA. PMA url: https://web1.domain.tld:8081/phpmyadmin When I visit this URL I receive following error: Apache access log entry: What should I check in this case? During multiserver setup I didn't set SSL on web1 server. Maybe this is a problem? If yes, how to setup it?
You can set it up either manually or running Code: ispconfig_update.sh --force and choosing yes when asked to configure a new SSL cert.
That resolved my problem. Now, is there PMA SSO? I want that customer be able to login to PMA without entering DB password.
For the second part, if you mean passing login and password via ISPConfig link, this is neither an ISPConfig feature nor it is encouraged and modern browsers' policy is currently against it. For the first part, simply google for "sso login for phpmyadmin" as it seems possible to implement this.
It is possible to implement a direct login method, so you login to phpMyAdmin when clicking the DB link without having to enter credentials. However, I don't know of a implementation for ISPConfig and we will not build something like that soon.
Here is documentation: https://docs.phpmyadmin.net/en/latest/config.html#example-for-signon-authentication For example: hestiacp implemented this by creating temp user to the db with expiration. Each time you press "login to pma" button, "token" is generated with that temp user and loggedin to pma via signon. It is trivial to do, but of course someone must do... So yea...
As @Th0m said, this won't be available prebuilt in ISPConfig in the near future but you can always try other solution like via ISPConfig API which is already available. From the above google search you can find this phpMyAdmin SSO Login Example which is a very general idea on how to try to implement this via ISPConfig API, for now.
Well, I know how to implement this, but I thought such trivial function already exist in ISPC. Anyway, thank you.
You know you can also contribute in various ways to ISPConfig especially in coding this if you want to make this feature available faster.