vicidial.org

Startet from here.

http://www.eflo.net/VICIDIALforum/viewt ... 22934e89b8

We need an script which can change all standart passwords into new passwords.

The cron user is a big security problem.

I donate 100 $ for this Skript.

Thx Speed

Here you go:

http://www.vicidial.org/VICIDIALmantis/view.php?id=247

Please let me know if anything needs to be polished or fixed.

Follow up- after a reminder more than a month ago, Speed still hasn't gotten back to me, neither with results from testing, nor with payment.

money ist send !!

Thanks.

One thing though is that if the cron password for mysql is the same as the cron password of the manager.conf it is still vulnerable.

I tested this and it worked

hello ,

i test it now ,, but problems ,, here ,,

after skript i had an error. ..


== Manager 'sendcron' logged on from 127.0.0.1
-- Got SIP response 488 "Not Acceptable Here" back from 85.238.171.54
> Channel SIP/102-081d3e78 was never answered.
Jan 25 15:29:00 WARNING[12281]: cdr.c:566 ast_cdr_disposition: Cause not handled
== Parsing '/etc/asterisk/manager.conf': Found
== Manager 'sendcron' logged on from 127.0.0.1


i dont know why ?..

did anyone know more about this ,,

thx

Hi, sorry for late reply, I am on vacation for another few days.

On first sight I can't see why the script lead to the message you are getting.

Is there any update on this issue?

Hi Okli, i want to test the script but i am receiving a Permission Denied

i am logged as a root

any ideas why this happen

Is it multi-server install? You will get that on all servers but the DB one with default MySQL settings, which is safe and normal, if the error comes from MySQL.

If it is not multi-server- can you post the full output, when you run the script with --debug option?

i have a cron security for multiserver
if you need it i can share

This would be interesting to share, would you mind uploading it to Mantis and posting a link here?

added the ability to change the cron mysql user on the database.

http://www.vicidial.org/VICIDIALmantis/view.php?id=247

Does anyone know if this still works with the most current version of VICIdial?