Welcome email is not displaying webclient password

[jmatano]

I just noticed that our welcome email is no longer sending the web client password in it. According to the template it has this line:

<p>With 3CX webclient you don’t need to install any software. To access it</p>
<ol type="List">
<li>%%IF_TWO_LINKS_START%%Go to %%WEBCLIENTURL%% if in the office or <br>%%WEBCLIENTURLPUBLIC%% when out of the office%%IF_TWO_LINKS_END%%%%IF_ONE_LINK_START%%Go to %%WEBCLIENTURL%%%%IF_ONE_LINK_END%%</li>
<li>Login using %%EXTNUMBER%%</li>
<li>With password %%SERVICES_ACCESS_PASSWORD%%</li>

But the resulting email gets delivered as:

With 3CX webclient you don’t need to install any software. To access it

1. Go to (removed our FQDN but is present)
2. Login using (remove my extension but is present
3. With password

The "with password part stops there and doesn't include the actual password. We actually rely on that to provide the password to the users since there is no self service option for resetting or setting the initial password. How can I get the password restored back to the email?

 

[Charles_3CX]

Please validate that your system is running the last version, sp8 (18.0.8.939)

Check under the management console > Settings > parameters > Search for MAILTEMPLATE_EXTWELCOME_CUSTOM, then press the X on the left of the template to delete the custom email template and use the default version.

Then send another welcome email out to your address and let us know.

Note: In the latest in the latest version passwords have been removed for security reasons, as per my colleague's reply below:

 

[Alejandro_3CX]

Hi @jmatano could you please check these blogs

https://www.3cx.com/blog/news/security-action-plan/
https://www.3cx.com/blog/releases/v18u7a-alpha-security-update/
https://www.3cx.com/blog/releases/v18u7a-beta-security-update/

Starting from the SP7 Security update, the welcome email no longer have the web client password, qr code, provisioning file.

The user has to set the web client password and from there go to apps and can provisioning the apps.

Also check you are not using welcome email custom template as mentioned by my colleague

Have a great day!

 

[jmatano]

That worked in that it triggered a self-service password creation link and I was able to get in. A follow-up issue now, I am testing the forgot password feature, and whether I type my extension or my registered email address, a password reset email does not get sent. I checked our perimeter spam filter to ensure it wasn't stopped.

 

[Charles_3CX]

Is your email unique in the system, only used on one extension and nowhere else?

 

[jmatano]

Is your email unique in the system, only used on one extension and nowhere else?

It wasn't, so I changed it to a unique email address, but I am still not receiving the forgot password link using either the unique email or the extension.

 

[Charles_3CX]

Can you please open a support ticket so we can request some information to check this further?

 

[RobG]

Can I also add that the welcome email in latest debian V18 still has 2 links to out of office (using FQDN) and in office (using LAN IP), even when you've installed with split dns enabled.

Obvioulsly the out of office works best even in office (as connection is still trusted), but all we need here is one "Click Here" link (to FQDN) to log in.