AsteriskNOW & FreePBX – Change All Default Passwords

John

The default installation of asteriskNOW has the amportal.conf settings to use AUTHTYPE=database for authentication and a default username/password combination that is throwing some people for a loop - in terms of changing the default password. The reason why people are not able to locate the freepbx user information in any of the files to change is that it is actually stored in the MySQL database user tables not files. I don't know why this username/password is setup like this and no clear mention of changing it made from what I could see - but I'll admit I didn't do a full RTFM. From reading some other posts in this forum it appears to be a common situation.

In order to change the freepbx/fpbx username and password combination (from what I can derive) you will need to follow these steps.

- from a command prompt as root run the command “mysql” without the quotes. Depending on if you’ve overridden the username/password combination you might need to pass switches “mysql –u root –p” or some combination to login.
- once inside the mysql prompt run the SQL statement “use mysql”
- then run the SQL statement “UPDATE user set Password=PASSWORD(‘newsecretpassword’) WHERE User=’freepbx’
- then run the SQL statement “flush privileges”
- exit the mysql prompt
- use a text editor to open /etc/amportal.conf
- find the AMPDBPASS line and change the value fpbx to your newsecretpassword that you set earlier in MySQL
- text editor next on /etc/asterisk/cdr_mysql.conf
- find the fpbx password value and replace the old password with your newsecretpassword
- text editor next on /etc/asterisk/extensions_additional.conf (I know you shouldn’t edit this directly but you need to since you can’t “Apply Changes” to regenerate this file yet)
- find the fpbx password value and replace the old password with your newsecretpassword
- now that you’ve changed these files execute a amportal restart command and you should be good to go

There might be a “proper” way of doing this but since no one seems to know what that is here is a way to do it in the meantime to close this HUGE GAPING SECURITY HOLE.

by mobinet » Fri Jun 25, 2010 11:39 am
http://forums.digium.com/viewtopic.php?t=74423

Test

FreePBX Admin Password (default is user admin and password admin)
Administrators -> admin
Recommend that you change the username and set a strong password
Asterisk Manager Password
Edit /etc/asterisk/manager.conf.  [admin] must match AMPMGRUSER=admin below.

1. [admin]
   
2. secret=yournewSTr0ngpassw0rd

复制代码

Edit /etc/amportal.conf

1. # AMPMGRUSER: the user to access the Asterisk manager interface
   
2. AMPMGRUSER=admin
   
3. # AMPMGRPASS: the password for AMPMGRUSER
   
4. AMPMGRPASS=yournewSTr0ngpassw0rd

复制代码

Flash Operator Panel Password
Edit /etc/amportal.conf

1. # FOPPASSWORD: the secret code for performing transfers and hangups in the Flash Operator Panel
   
2. FOPPASSWORD=yournewSTr0ngFOPpassw0rd

复制代码

ARI Admin password
Edit /etc/amportal.conf and add the following to the end of /etc/amportal.conf

1. # ARI_ADMIN_USERNAME
   
2. ARI_ADMIN_USERNAME=ariadmin
   
3. # ARI_ADMIN_PASSWORD
   
4. ARI_ADMIN_PASSWORD=yournewSTr0ngARIpassw0rd

复制代码

———————————————————————————————————

Recommend a reboot but you may get away with

1. # amportal restart

复制代码

Once the Asterisk is up and running, connect to asterisk process:

1. # asterisk -rvvvvvvv
   
2. pbx*CLI>

复制代码

While connected to the CLI, browse around FreePBX.  This should cause the following output on the CLI.

1. == Manager ‘admin’ logged on from 127.0.0.1
   
2. == Manager ‘admin’ logged off from 127.0.0.1
   
3. == Manager ‘admin’ logged on from 127.0.0.1
   
4. == Manager ‘admin’ logged off from 127.0.0.1
   
5. == Manager ‘admin’ logged on from 127.0.0.1
   
6. == Manager ‘admin’ logged off from 127.0.0.1
   
7. pbx*CLI>

复制代码

This shows that FreePBX is able to sucessfully logon to the running process.