Vicidial expressbox - Default logins / passwords

[darryldale]

Ordered a pre-installed Vici Expressbox from vicidial.com.

Didn't come with much in the way of passwords.

Can anybody tell me the default login / passwords for:

astguiclient
vicidial admin password
phpmyadmin root password

I managed to guess the O/S root password and change it (it was vicidial).

Thanks.

Darryl

[darryldale]

Turns out that what I have is actually "Vicibox Redux 3.0.5".

Will do a search for default passwords now that I know exactly what I have.

Darryl

[darryldale]

OK making progress.

O/S root password was the default of vicidial.
ViciDial admin login credentials were default of 6666 / 1234.

The last one I need to figure out is the default root password for the mySQL database. Is there a config file I can look at to see what that has been set to when I ordered the machine form ViciDial.com?

Darryl

[darryldale]

OK, found a mySQL login / password in etc/astguiclient.conf

It would appear to be a user configured with limited access on certain schemas / tables.

Is there a default root password for the mySQL database when installing ViciBox Redux 3.0.5?

Darryl

[williamconley]

have you tried it without a password?

[Kumba]

The default login/password for the ViciDial Admin web page is 6666/1234

The default root login for the machine is 'vicidial'.

The MySQL root password is blank, and MySQL is in it's unsecured state. This means you should be able to just type 'mysql' on the command line and get in.

If it's not those, then someone has already changed them, and you would have to look into doing a password recovery.

[darryldale]

Thanks for the info.

My mistake is I was trying to log into phpmyadmin with a user of root and a blank password and it was kicking back an error about blank passwords not being allowed so I assumed that "root" must have a password.

If I SSH into the server and type mysql it lets me in no problem.

Looks like I'm good to go.

Is there a tutorial for "locking down" a default installation of ViciBox Redux?

Darryl

[williamconley]

Tutorial? no.

But:

run the script to change the "cron" password.

change the passwords for ALL the phones (both the login password and the "registration" password).

change the default phone password (so when new phones are created, they do not have "test" as the password!).

create a root mysql password.

change your SSH port to anything but 22! (exercise caution, don't lock yourself out!)

use IPtables to allow ONLY good IP addresses to access the system. (we have a system for this we've been testing and will be publishing shortly, because it seems to be working ... THANKS to KUMBA!! who saved us a lot of development with a quick experienced opinion!)