Can anyone confirm that phpMyAdmin AllowNoPassword works with MySQL databases?

Question

I have a version of phpMyAdmin located on my local Apache server.

I am trying to login without a password however phpMyAdmin keeps throwing the warning:

Login without a password is forbidden by configuration (see AllowNoPassword)

However in my config.php file for phpMyAdmin I have set:

$cfg['Servers'][$i]['AllowNoPassword'] = TRUE;

So I don't know why the message is still appearing.

This works for me immediatley in CentOS 7, but not CentOS 6. Can't figure it out :(. PS: It would be nice if we knew the OS you were on!, but its a little late lol — FreeSoftwareServers, Jan 08 '17 at 02:13

score 140 · Accepted Answer · edited Oct 17 '19 at 16:34

140

Copy config.sample.inc.php to config.inc.php.

In most cases you will find the config file
- on linux: /etc/phpmyadmin/config.inc.php
- on mac: /Library/WebServer/Documents/phpmyadmin/config.inc.php
If you are trying to log in as root, you should have the following lines in your config:

$cfg['Servers'][$i]['user'] = 'root';
$cfg['Servers'][$i]['AllowNoPassword'] = true;

edited Oct 17 '19 at 16:34

answered May 06 '11 at 08:37

user256430

3,575
5
33
33

2

In CentOS 7: `/etc/phpMyAdmin/config.inc.php` – Vy Do Nov 26 '14 at 16:19
7

this should be added in two places according to this: https://docs.oseems.com/general/web/phpmyadmin/enable-login-without-password and it should be $cfg['Servers'][$i]['AllowNoPassword'] = true; NOT $cfg['Servers'][$i]['AllowNoPasswordRoot'] = true; – Malintha Jan 30 '15 at 03:23
I'm going to check the obvious first and ask if you remembered to copy your config.sample.inc to config.inc. ??? Why to make config.php ? There is alread config,inc.php – Pratik Joshi Feb 15 '15 at 07:41
Works for me... Thanks :) – Robin Hood Mar 09 '16 at 16:51
nothing worked for me then i followed this document and changed password of root. https://www.digitalocean.com/community/tutorials/how-to-reset-your-mysql-or-mariadb-root-password-on-ubuntu-18-04 – Pontus Carme Apr 07 '19 at 14:32
In manjaro/Arch, the file will be located under /etc/webapps/phpmyadmin/config.inc.php – sajed zarrinpour May 21 '19 at 15:38

score 10 · Answer 2 · edited May 17 '19 at 06:32

According to this: https://www.simplified.guide/phpmyadmin/enable-login-without-password

This $cfg['Servers'][$i]['AllowNoPassword'] = TRUE; should be added twice in /etc/phpmyadmin/config.inc.php

if (!empty($dbname)) {
    // other configuration options
    $cfg['Servers'][$i]['AllowNoPassword'] = TRUE;
    // it should be placed before the following line
    $i++;
}

// other configuration options
$cfg['Servers'][$i]['AllowNoPassword'] = TRUE;

score 7 · Answer 3 · edited Jun 17 '14 at 19:04

7

I tested the statement:

$cfg['Servers'][$i]['AllowNoPasswordRoot'] = true;

It did not work out for me.

Instead

$cfg['Servers'][$i]['AllowNoPassword'] = true;

worked.

Thanks!

edited Jun 17 '14 at 19:04

Alex VII

930
6
25

answered Jun 17 '14 at 18:38

Orion

139
1
10

1

error clearly states `AllowNoPassword` needs to be `true` not `AllowNoPasswordRoot`. but documentation doesn't mention this. setting `AllowNoPassword` to `true` works indeed. – vknyvz Nov 06 '15 at 21:03

Mohamed Elbahja · Answer 4 · 2019-10-07T21:31:32.287

5

Yes not working! I spent whole day with this stupid phpMyAdmin. Just add a new user with a password

1 - Login to mysql or mariadb mysql -u root -p

2 - Run these SQL commands to create a new user with all permissions (or grant your custom permissions)

CREATE USER 'someone'@'localhost' IDENTIFIED BY 'password';
GRANT ALL PRIVILEGES ON *.* TO 'someone'@'localhost';
FLUSH PRIVILEGES;

2 - Go to /etc/phpMyAdmin/config.inc.php and change this:

$cfg['Servers'][$i]['user']          = 'someone';
$cfg['Servers'][$i]['password']      = 'password';

WARNING: This config is for localhost development server only, If you're running a production server you must use strong credentials and not setting user pass in config.inc.php

edited Oct 07 '19 at 21:31

answered Oct 05 '19 at 21:41

Mohamed Elbahja

609
1
8
9

thanks but the first part is sufficent , why the second part? – Ahmed C Jul 19 '20 at 19:04
if you're on localhost and want to save some time, but it's not working either these days, I 've deleted the outdated phpMyAdmin... now I'm using DBeaver instead. – Mohamed Elbahja Jul 19 '20 at 23:26

score 4 · Answer 5 · answered Feb 11 '13 at 14:30

4

You might have made the same silly mistake that I did, by not removing the // making it a comment.

The line should be like this, but not as a comment.

$cfg['Servers'][$i]['AllowNoPassword'] = TRUE;

answered Feb 11 '13 at 14:30

Pratik Bothra

2,642
2
30
44

score 3 · Answer 6 · answered Jul 06 '13 at 23:35

Make sure you don't add or uncomment the AllowNoPassword option after the $i++ line.

/* Uncomment the following to enable logging in to passwordless accounts, * after taking note of the associated security risks. */

 $cfg['Servers'][$i]['AllowNoPassword'] = TRUE;

score 3 · Answer 7 · answered Jun 12 '14 at 10:36

3

Just in file /etc/phpmyadmin/config.inc.php, uncomment or add the line(if not there),

$cfg['Servers'][$i]['AllowNoPassword'] = TRUE;

It works just Awesome!

if you have any doubt restart apache.

sudo /etc/init.d/apache2 restart

Cheers!!!

answered Jun 12 '14 at 10:36

Manish Shrivastava

30,617
13
97
101

score 3 · Answer 8 · answered Dec 09 '21 at 20:50

I had the same problem. Edit config.inc.php didn't work, similary as reinstall phpmyadmin, apache or mysql. Only way is using password to log in to phpmyadmin.

How to set password:

Do everything from below script:

sudo mysql_secure_installation

Run:

sudo mysql

Change authentication method of password for root and set password:

mysql> SELECT user,authentication_string,plugin,host FROM mysql.user;

Run:

mysql> FLUSH PRIVILEGES;

exit mysql.

Now you can log to phpmyadmin correctly.

score 2 · Answer 9 · edited Nov 21 '13 at 09:17

2

I have the same problem here, then I reinstalled mysql and it worked.

sudo apt-get install mysql-server mysql-common mysql-client

edited Nov 21 '13 at 09:17

Adrian Thompson Phillips

6,893
6
38
69

answered Nov 21 '13 at 08:55

Aldy syahdeini

349
1
4
16

score 2 · Answer 10 · edited Jul 19 '18 at 08:56

2

I had a same problem, and I solved my problem.
First go to config.default.php and change

$cfg['Servers'][$i]['AllowNoPassword'] = false;

to

$cfg['Servers'][$i]['AllowNoPassword'] = true;

edited Jul 19 '18 at 08:56

Krunal Sonparate

1,122
10
29

answered Mar 25 '15 at 09:48

zheek

742
1
11
22

where is config.default.php? – phil294 Aug 04 '16 at 11:10

score 2 · Answer 11 · answered Jul 26 '21 at 11:09

login without a password is forbidden by configuration (see allownopassword)

In ubuntu 20.04 and MYSQL 8.0.x I had the same problem and I tried to allow PHPMyAdmin not to using passwords.

So for this you can open the config file by using this command:

sudo nano /etc/phpmyadmin/config.inc.php

Then use CTRL+w to find $cfg['Servers'][$i]['AllowNoPassword'] in PHPMyAdmin`s config file:

/* Uncomment the following to enable logging in to passwordless accounts,
     * after taking note of the associated security risks. */
//$cfg['Servers'][$i]['AllowNoPassword'] = TRUE;

Uncomment the line by removing the // like this:

$cfg['Servers'][$i]['AllowNoPassword'] = TRUE;

Use CTRL+o to save the file and then CTRL+x to exit from the file.
After that restart the MySQL by this command:

sudo service mysql restart

Try to access PHPMyAdmin in your local http://127.0.0.1/phpmyadmin/

score 1 · Answer 12 · edited Jun 27 '14 at 19:24

After a lot of trials I found the following solution.

This will work if you copied all phpmyadmin files in /var/www

go to your copied location of phpmyadmin folder in /var/www

copy the config.sample.inc.php file as config.inc.php

edit in config.inc.php the following line:

$cfg['Servers'][$i]['AllowNoPassword'] = true;

(In original file it was false, change it as true and save it.)

Then you will be able to login phpmyadmin without password.

score 1 · Answer 13 · edited Jan 25 '16 at 16:20

$cfg['Servers'][$i]['AllowNoPassword'] = TRUE;

yes the above answer is correct, but it's not secure, you can login root user directlyinto phpMyAdmin.

If you want to create new user with password and give grant permission, execute the below command in MySQL on terminal, Login into your server on terminal,

  # mysql

 mysql> GRANT ALL PRIVILEGES ON *.* TO  'user-name'@'%'  IDENTIFIED BY  'password'   REQUIRE NONE WITH GRANT OPTION MAX_QUERIES_PER_HOUR 0 MAX_CONNECTIONS_PER_HOUR 0 MAX_UPDATES_PER_HOUR 0 MAX_USER_CONNECTIONS 0;

score 1 · Answer 14 · answered Mar 25 '21 at 23:46

1

For me I had to set the auth type to config in addition to the setting the allow no password option in the config.inc.php file.

$cfg['Servers'][$i]['auth_type'] = 'config';
$cfg['Servers'][$i]['AllowNoPassword'] = TRUE;

answered Mar 25 '21 at 23:46

Joshua Graham

268
1
5

score 0 · Answer 15 · edited Jan 04 '15 at 02:59

Others may find, as I did, (working in OS X 10.10.1) that the situation for MAMP PRO (at least in the current release, 3.0.7.3, is different.

All my attempts to apply the remedies suggested here failed. Upon examining the PHP error log I discovered that the index.php that is operating (in /Libary/Application Support/appsolute/MAMP PRO/index.php -- at line 43, is deciding NOT to go to the config.inc.php that is discussed here (at /Applications/MAMP/bin/phpMyAdmin/config.inc.php) but rather to /Library/Application Support/appsolute/MAMP PRO/phpMyAdmin/config.inc.php.

Furthermore, there is no such file there (after a 'successful' install of MAMP PRO), so I'm stuck with the error, and furtherfuthermore, every time I try to put the correct file there, when I restart MAMP PRO, it is not there anymore - something is automatically refreshed to eliminate the config.inc.php I'm putting there. My workaround for now is to do this in MAMP instead of MAMP PRO.

score 0 · Answer 16 · answered Oct 18 '18 at 09:46

I had to install MariaDB. I am using OpenSUSE LINUX Leap 15 and had to execute these commands:

sudo zypper update
sudo zypper install mariadb mariadb-client mariadb-tools
sudo systemctl start mysql
sudo systemctl enable mysql //enable auto start at boot time3
sudo mysql_secure_installation

Source.

score 0 · Answer 17 · answered Nov 06 '18 at 14:35

It works; just thought this would be helpful to someone in the future.

If you are working with MAMP, as a security measure, the $cfg['Servers'][$i]['AllowNoPassword'] = true; usually will be missing in the config.inc.php file so if you want to use phpMyAdmin without a password for root then simply add it preferably after the $cfg['Servers'][$i]['AllowDeny']['rules'] = array(); statement.

Then Restart your server just to be sure and you will be good to go.

score 0 · Answer 18 · answered Feb 10 '21 at 12:17

After lots of struggle I found here you go:

open folder -> xampp
then open -> phpmyadmin
finally open -> config.inc

$cfg['blowfish_secret'] = ''; /* YOU MUST FILL IN THIS FOR COOKIE AUTH! */

Put SHA256 inside single quotations like this one

830bbca930d5e417ae4249931838e2c70ca0365044268fa0ede75e33aff677de

$cfg['blowfish_secret'] = '830bbca930d5e417ae4249931838e2c70ca0365044268fa0ede75e33aff677de
';

I found this when I was downloading updated version of phpmyadmin. I wish this solution help you.

score 0 · Answer 19 · answered Mar 12 '21 at 03:26

0

My problem was in config.inc.php <? changed to <?php

answered Mar 12 '21 at 03:26

Vitalicus

1,188
13
15

score 0 · Answer 20 · edited Apr 15 '21 at 10:38

0

vim /etc/phpmyadmin/config.inc.php

or

sudo -H gedit /etc/phpmyadmin/config.inc.php

uncomment this below line

$cfg['Servers'][$i]['AllowNoPassword'] = TRUE;

Then, exit and save the file using the following command,

:wq

edited Apr 15 '21 at 10:38

Syscall

19,327
10
37
52

answered Apr 14 '21 at 08:44

Sindhukumari P

324
2
6

score 0 · Answer 21 · answered Feb 02 '23 at 05:13

0

In addition to https://stackoverflow.com/a/5908864/1490667 In CentOS7, user 'apache' runs httpd, thus make sure user 'apache' has permission to read /etc/phpMyAdmin/config.inc.php.

answered Feb 02 '23 at 05:13

chen.hsinwei

1

Can anyone confirm that phpMyAdmin AllowNoPassword works with MySQL databases?

21 Answers21

Linked