V20 update: rights to the administration console to be restored via SSH access

[estragon]

Hello everyone. First of all to be very clear, I made a newbee error.

I was using version 18, locally on a Debian blade. I saw the update appear on my admin interface at the beginning of the week. I promised myself I would check everything carefully before updating it in a few days.

Yesterday evening after a very complicated week, I wanted to launch a backup, but like an imbecile, instead of launching the backup, I launched the update...(don't ask me why... if it was my employee I deserve to be fired!!)
But we have to move forward, and so this afternoon I did some checks on the situation to think about what's next and not make any additional accidents.

Current situation :
- actually the update itself went well (I even received the logs that everything was ok).
- the Pbx itself works wonders... fortunately!
- I have SSH access (as root) which remains available to the Debian on which 3cxpbx is running;
- I kept client web access;
- but I no longer have access to the administration via the web!

Observations on the update itself:
- a “rescue” backup is made automatically when you launch the update (or at least, that’s the case for me!) and I find that very cool for diots like me.
- on the other hand, without taking anything away from my idiocy, perhaps more than warning messages, would it be good to block the possibility of updating if there are no users with the admin function: because afterward, I think that’s my problem.

I erase everything, and start with the automatic backup (things will surely be missing but it will be better than nothing) but this prospect does not inspire me more than that, I admit.

By browsing the forums a bit and browsing my 3cx tree via SSH I noticed that there are a lot of 3CX scripts available to attack them through the console. Among other things, I was able to make a backup with all my voicemail boxes, but as a result it is a backup of the current installation, which works, but which is missing the admin.

Would there be a way, through my SSH access, to modify the user characteristics to make one of the users an administrator and thus allow me to keep the installation that I have?
Is there another way to access this admin interface?
My machine is on a blade, but it has a VGA socket could that help?

Even if it's my very big and only fault, and even if I deserve to re-install everything for the trouble, if there is a solution via SSH that would be really cool and I'm sure it will help others user in the future.

Thank you for listening and helping.

 

[Evolute IT]

V20 has the admin console merged into the Webclient. You should use a system owner to login into the Webclient and you will see the admin section.

The old management console is simply gone.

 

[estragon]

In practice I manage to enter the webclient but not to switch to the admin part (with the same url I hear).

Before the update to V20, I had access to the admin, but perhaps I had not added the "system owner" part. I had never had a problem with that, but reading the forums, it seems that I should have checked this before doing the update and made sure that I was declared "system owner" (for me that is seemed natural because I had access to the whole system) but in practice I did not control...

Is there a way now to control it despite the fact that I am in V20 and I cannot change the webclient to administrator? This is where I hoped to be able to use my SSH access to do these checks and then access from the webclient... at least it seems to me.

Merci

 

[Evolute IT]

If the upgrade worked, then you must have had a system owner defined. Otherwise it would've failed and you would also get a banner in the management console telling you about the system owner requirement.

Unfortunately, if you don't have those credentials, you won't be able to do anything. Even through SSH, there's nothing that you can do.

 

[estragon]

I wouldn't want to mislead you, but I have a hunch that the owner user does not have authorization for webclient access, and the one with webclient access does not have administrator access. . in fact I have the user/password that I used until now and I am 200% sure of it.Was telling me that an SSH script would allow you to modify the usage rights?

 

[SteveITS]

I would hope it would check the owner can log in to the web client, otherwise that’s a pretty big hole.

You could try opening a ticket with 3CX. An alt option might be to install v18 and then restore from your backup.

V20 isn’t released yet…it’s mentioned on their blog although it isn’t labeled as a pre release in the GUI, and it’s flagged as an available update.

 

[solarian]

There really should be a BIG WARNING that administrator access is no more after upgrade to v20.

I've made the similar mistake: I created the System Owner account with dummy email to formally satisfy the criteria for some previous update so I could not reset the password.
Only the VM snapshot I took before upgrade saved me.

 

[estragon]

Good morning,
while discussing on the French forum, an informed user pointed out to me that I also had an email problem, in fact the owner of the installation and one of the users have the same email address (me in this case)...
To tell the truth, I don't want to blame anyone other than myself for being stupid, but we must recognize that the warning message when we launch the upgrade is really not very clear. Of course he talks about risk, but does not detail the prerequisites, and does not control them automatically...
I'm going to wait a few days if a kind soul can find me the script to modify the user rights from the SSH access that I have to see if I can restore a healthy situation, and if not ask me to re-install everything with the automatic backup made during the upgrade...

 

[kevinds]

I'm dealing with this right now too..

I used the web-interface to do the update the system to v20 and now I can't login. Forget password does its thing but I don't get the email..

Unfortunately, if you don't have those credentials, you won't be able to do anything. Even through SSH, there's nothing that you can do.

I also have root access via SSH but I find it very hard to believe that there is nothing I can do to get back into the system using the root account.. The "psql" command comes to mind as a good place to start..

 

[Evolute IT]

I'm dealing with this right now too..

I used the web-interface to do the update the system to v20 and now I can't login. Forget password does its thing but I don't get the email..



I also have root access via SSH but I find it very hard to believe that there is nothing I can do to get back into the system using the root account..

Unfortunately, you're not getting the email because you probably have more than 1 user set to that email. So it's not sending.

Again, there's no way via SSH to change that.

You will have to open a support ticket and hope that 3CX can do something. Otherwise, just restore a v18 backup on a v18 setup.

V20 isn't even officially released anyway so you shouldn't be using it.

 

[solarian]

As you have SSH access you can try
/usr/lib/3cxpbx/BackupCmd
and
/usr/lib/3cxpbx/RestoreCmd
All users are kept in this backup in one big XML file, so you can modify it to add/edit your System Owner user.
Just keep a backup copy of this backup file before editing.
(NOT CHECKED by me!)

 

[SteveITS]

Unfortunately, you're not getting the email because you probably have more than 1 user set to that email. So it's not sending.

PSA, 365 has a “plus addressing” feature where email+anytext@domain will work. Might have to think about that as a safety measure.

@solarian Worth a try I suppose but IIRC backups have a checksum.

 

[solarian]

@solarian Worth a try I suppose but IIRC backups have a checksum.

Yes, now I see it's encoded in XML filename.
Pity, this will stop only poor souls like us. Looking at the length of this checksum I bet true hacker would reverse-engineer it in hours if not in minutes.

 

[estragon]

Hallelujah: the new beta 2 solved my problem...

Good evening everyone. First of all, thank you for your help and your listening...
Following the various discussions, I was well on my way to a new, clean v18 installation. But I said to myself, I'll wait a few days to see things more clearly, since even if I don't have administration access, things still work...This evening while reading the forums, I saw that a new version v20 was available. And since I had resigned myself to eventually having to re-install everything, I said to myself let's see if I can do the ugrade...
already with my SSH access and sudo apt update sudo apt upgrade I was able to install updating without problem.

After this upgrade, I retested my password which I am 200% sure of but still nothing. On the other hand, I have a “lost password”, who didn’t send me emails, and that worked…
I received the email with password and by identifying myself with the correct email and new password... well it works!!!!I found admin access (via the little toothed wheel on the webclient page...).

So everything seems to be in order.So thank you all, and it seemed good to me to give this feedback even if it was stupid on my part, and not a very good start, but all in all it didn't end so badly, if that helps. other people.

Happy end of the year to everyone.