How to update root password on system/access question

[newuser1]

Is it as simple as doing a passwd via ssh on the system or is there an actual procedure? Also, is there a way to disable admin access from the GUI when coming from the WAN without disabling https to port 5001 publicly?

 

[nub]

You can rename the admin account, Settings > Security Settings > TAB Admin Credentials.

 

[newuser1]

You can rename the admin account, Settings > Security Settings > TAB Admin Credentials.

Thanks, does that do both ssh and the web interface?

 

[cobaltit]

Very scared reading the questions here.

No changing the 3CX APPLICATION password does not change the OS password. For changing the OS password refer to the OS forums/documentation (assuming Debian since you said SSH) or perhaps your cloud provider if that is your platform.

I assume by disabling admin access via the web without blocking 5001 you mean you want to allow remote phones to provision but not to allow web login. There is no feature in 3CX for that currently, that would be a feature request. If you wanted to disable admin console access remotely but allow the rest you would need to put some sort of application firewall/proxy in front that would prevent access based on the URL string. You could probably do the same by editing the nginx configuration. Neither is supported by 3CX but the former has less potential for breakage and is more likely to survive updates.

 

[nub]

Thanks, does that do both ssh and the web interface?

I dont know about ssh, I use 3cx for windows.
For ssh things like fail2ban or sshkey or restricting ssh to one ip address are options but specific to the distro you are using.

 

[YiannisH_3CX]

Hello @newuser1

Is it as simple as doing a passwd via ssh on the system or is there an actual procedure?

No actual procedure. This is entirely up to you on how you change the root password.

Also, is there a way to disable admin access from the GUI when coming from the WAN without disabling https to port 5001 publicly?

Currently no as port 5001 is used accessing the management console as well as presence and remote provisioning.