Hi All,

It has been a pleasure to use Elastix for all our requirements. things are working excellent until recently someone changed mysql password

Is there any way to change elastix mysql installation. As all admin/root passwords are public, anyone can do modifications to setup and ruin the system. Is there any way to change these default passwords? Specially MySQL password. I believe same password is hardcoded in number of places in elastix code. Please help.

Regards,
-Hema

The mysql password is a security issue if you allow more users to ssh the server or if you have something like phpmyadmin public available for the world. You can change the password, but a lot of things could break up so you have to be sure, what are you using the pbx for adn check that everything works fine.

regards,


rafael

Thanks Rafael for your suggestion. Is there any guideline/checklist what all / where all changes are required if mysql password is changed? I believe this password is hardcoded in places in php code. Pointers to such files will be really helpful to everyone working with Elastix installation.

Regards,
Hema

Hello,

I have found the password on the following files:

/var/www/html/vtigercrmWrapper.php
/var/www/html/libs/paloSantoInstaller.class.php
/var/www/html/sugarcrmWrapper.php
/var/www/html/modules/backup_restore/index.php
/var/www/html/modules/conference/index.php

Thanks a lot for your reply. I made the changes and things are working fine so far. Will update the group if i will come across any other file where changes are required. Thanks again.

Regards,
-Hema

Excellent! good news, please kepp us updated about it, we would like to know more about it

I changed the default password from "eLaStIx.2oo7" to something else.

All the following files have been updated with the new password and work great;

/var/www/html/vtigercrmWrapper.php
/var/www/html/libs/paloSantoInstaller.class.php
/var/www/html/sugarcrmWrapper.php
/var/www/html/modules/backup_restore/index.php
/var/www/html/modules/conference/index.php

EXCEPT application;

OpenFire

I try to login in but the login page doesn't show up. Do you know where I can find this file?

Thanks!

You may execute the following command:

grep -r "eLaStIx" /var/www/html/*

It will reveal you, where you haven't change yet the password

Thanks for the reply!

I just tried your command and it doesn't show me anything, just hangs.....
[root@elastix ~]# grep -r "eLaStIx" /var/www/html/*

This file I'm looking for must be located some where else. I tried the command one folder up and this is the output;

[root@elastix ~]# grep -r "eLaStIx" /var/www/*
/var/www/html/schema.meetme:IDENTIFIED BY 'eLaStIx.asteriskuser.2oo7';
/var/www/html/modules/graphic_report/libs/grafic_queue.php:$dsnAsteriskCdr = "mysql://asteriskuser:eLaStIx.asteriskuser.2oo7@localhost/asteriskcdrdb";
/var/www/html/modules/graphic_report/libs/grafic_queue.php:$dsnAsteriskDev = "mysql://asteriskuser:eLaStIx.asteriskuser.2oo7@localhost/asterisk";
/var/www/html/modules/graphic_report/libs/grafic_trunk2.php:$dsnAsteriskCdr = "mysql://asteriskuser:eLaStIx.asteriskuser.2oo7@localhost/asteriskcdrdb";
/var/www/html/modules/graphic_report/libs/grafic_trunk.php:$dsnAsteriskCdr = "mysql://asteriskuser:eLaStIx.asteriskuser.2oo7@localhost/asteriskcdrdb";
/var/www/html/modules/report_call/configs/default.conf.php: $arrConfModule['dsn_conn_database'] = 'mysql://asteriskuser:eLaStIx.asteriskuser.2oo7@localhost/asteriskcdrdb';