EDIT 2/11/09 – For the latest and most complete set of instructions on setting security for trixbox CE v2.6, please see chapter 5 of my trixbox CE v2.6.2 Complete Setup Guide for Small Business located at http://sureteq.com/asterisk/trixboxv2.6.2.htm.
Back to the post…
——————————–
So, when you log into trixbox CE v2.6 and go to ‘PBX Settings,’ you are told that your default admin and mysql passwords should be changed…here’s how to do it. A cleaner, HTML version of these instructions can be found at http://sureteq.com/asterisk/trixbox_CE_v2.6_security.htm.
Change default passwords:
Let’s change our passwords. We need to do this at the Linux CLI.
Update maint password by typing ‘passwd-maint’ at the command line. Enter the password twice.
Update Web meetme password by typing ‘passwd-meetme’ at the command line. Enter the password twice.
FreePBX admin pass:
To change the FreePBX manager pass, you need to edit two separate files and put in the new password.
nano /etc/asterisk/manager.conf
Find ’secret = amp11′ under the [admin] section. Change ‘amp11′ to your new desired password. CTRL+X followed by ‘Y’ to save and exit.
Now, we need to edit the /etc/amportal.conf to use our new password.
nano /etc/amportal.conf
Find the line that says ‘AMPMGRPASS=amp11′ and change the ‘amp11′ to the new password you just set. CTRL+X followed by ‘Y’ to save and exit.
amportal restart
*** NOTE: I have found out the hard way that FreePBX does not like having an exclamation point (!) in the admin password. There may be other special characters that it doesn’t like also.
MySQL passwords:
Update the MySQL asteriskuser password by doing the following at the Linux CLI:
mysqladmin -u asteriskuser -p password new_password_here
Replacing ‘new_password_here’ with your desired password. When you hit ‘Enter’ you’ll be prompted for a password…enter in the default password of ‘amp109.’
Now, we need to edit the /etc/amportal.conf to use our new password.
nano /etc/amportal.conf
Find the line that says ‘AMPDBPASS=amp109′ and change the ‘amp109′ to the new password you just set. CTRL+X followed by ‘Y’ to save and exit.
***NOTE: In the amportal.conf, there are TWO places to change the amp109 password…near the top of the file, and at the very end. The one at the top is commented out, so changing that one doesn’t really do anything…but to be consistent, make sure you change the password in both places.
You will also need to update the password in the /etc/asterisk/cdr_mysql.conf file for call detail records (cdr).
nano /etc/asterisk/cdr_mysql.conf
Find the line that says ‘password=amp109′ and change the ‘amp109′ to the new password you just set. CTRL+X followed by ‘Y’ to save and exit.
service mysqld restart
amportal restart
*** NOTE: I have found out the hard way that FreePBX/MySQL does not like having an exclamation point (!) in the password. There may be other special characters that it doesn’t like also.
It is also a good idea to change the default mysql root user password. To change the default mysql root password, do the following:
mysqladmin -u root -p password new_password_here
Replacing ‘new_password_here’ with your desired password. When you hit ‘Enter’ you’ll be prompted for a password…enter in the default mysql root user password of ‘passw0rd’ (with a zero)
You will also need to update the password in the /etc/asterisk/cbmysql.conf file for meetme settings.
nano /etc/asterisk/cbmysql.conf
Find the line that says ‘password=passw0rd’ and change the ‘passw0rd’ to the new password you just set. CTRL+X followed by ‘Y’ to save and exit.
service mysqld restart
amportal restart
