• V20: 3CX Re-engineered. Get V20 for increased security, better call management, a new admin console and Windows softphone. Learn More.

How to update root password on system/access question

Status
Not open for further replies.

newuser1

Premier Customer
Joined
Nov 30, 2017
Messages
35
Reaction score
1
Is it as simple as doing a passwd via ssh on the system or is there an actual procedure? Also, is there a way to disable admin access from the GUI when coming from the WAN without disabling https to port 5001 publicly?
 
You can rename the admin account, Settings > Security Settings > TAB Admin Credentials.
 
You can rename the admin account, Settings > Security Settings > TAB Admin Credentials.

Thanks, does that do both ssh and the web interface?
 
Very scared reading the questions here.

No changing the 3CX APPLICATION password does not change the OS password. For changing the OS password refer to the OS forums/documentation (assuming Debian since you said SSH) or perhaps your cloud provider if that is your platform.

I assume by disabling admin access via the web without blocking 5001 you mean you want to allow remote phones to provision but not to allow web login. There is no feature in 3CX for that currently, that would be a feature request. If you wanted to disable admin console access remotely but allow the rest you would need to put some sort of application firewall/proxy in front that would prevent access based on the URL string. You could probably do the same by editing the nginx configuration. Neither is supported by 3CX but the former has less potential for breakage and is more likely to survive updates.
 
Thanks, does that do both ssh and the web interface?
I dont know about ssh, I use 3cx for windows.
For ssh things like fail2ban or sshkey or restricting ssh to one ip address are options but specific to the distro you are using.
 
Hello @newuser1

Is it as simple as doing a passwd via ssh on the system or is there an actual procedure?
No actual procedure. This is entirely up to you on how you change the root password.

Also, is there a way to disable admin access from the GUI when coming from the WAN without disabling https to port 5001 publicly?
Currently no as port 5001 is used accessing the management console as well as presence and remote provisioning.
 
Status
Not open for further replies.
Get 3CX - Absolutely Free!

Link up your team and customers Phone System Live Chat Video Conferencing

Hosted or Self-managed. Up to 10 users free forever. No credit card. Try risk free.

3CX
A 3CX Account with that email already exists. You will be redirected to the Customer Portal to sign in or reset your password if you've forgotten it.