25
D14049.05
February 2009
Grey Headline
(continued)
TANDBERG
VIDEO COMMUNICATIONS SERVER
ADMINISTRATOR GUIDE
Introduction
Getting started
Overview and
status
System
configuration
VCS
configuration
Zones and
neighbors
Call
processing
Bandwidth
control
Firewall
traversal
Appendices
Applications
Maintenance
System administrator access
Administrator accounts
The VCS has a default administrator account
with full read/write access. This account is
used to log into the VCS using the web interface
or the CLI. You can add additional administrator
accounts with either read/write access or read-
only access which can be used to log in using
the web interface only. See the
Administrator
accounts
section for information on how to
create these additional accounts.
!
It is possible to have more than one
administrator session running at the
same time. These sessions could be
using the web interface, command line
interface, or a mixture of both. This may cause
issues if each administrator session is
attempting to make the same configuration
changes.
Default administrator account
The default administrator account has a
username of
admin
(all lower case) and a
default password of
TANDBERG
(all upper case).
You cannot delete the default administrator
account or change the
admin
username, but
for security reasons you should change the
password as soon as possible. Choose a strong
password, particularly if administration over IP
is enabled. You will receive a warning on the
web interface and the CLI if the
admin
account
has the default password configured.
Changing the default administrator
account password
To change the password for the
admin
account:
Maintenance > Administrators >
•
Administrator accounts.
You will be taken to the
Administrator
accounts
page.
Click on
View/Edit
for the
admin
name.
You will be taken to the
Edit administrator
account
page.
In the
Password
and
Confirm password
fields,
enter the new password, and click
Save
.
xConfiguration SystemUnit Passwor
•
d
You cannot set a blank password for the
admin
user or any other administrator
account, or the
root
account.
Root account
The VCS provides a root account which can be
used to log in to the VCS operating system. This
account has a username of
root
(all lower case)
and a default password of
TANDBERG
(all upper
case). For security reasons you must change
the password as soon as possible. You will
receive a warning on the web interface and the
CLI if the root account has the default password
configured.
!
The
root
account should not be used in
normal operation, and in particular
system configuration should not be
conducted using this account. Use the
admin
account instead.
Changing the root account password
To change the password for the
root
account:
Log in to the VCS as
1.
root
. By default you
can only do this using a serial connection or
SSH.
Type
2.
passwd
.
You will be asked for the new password.
Enter the new password and when prompted,
3.
retype the password.
Type
4.
exit
to log out of the root account.
Accessing the root account over SSH
and Telnet
By default, the root account can be accessed
over a serial connection or SSH only - access
over Telnet is disabled by default. You may wish
to enable access over Telnet, but for security
reasons we do not recommend this.
To enable and disable access to the root
account using SSH and Telnet:
Log in to the VCS as
1.
root
. By default you
can only do this using a serial connection or
SSH.
Type one of the following commands:
2.
rootaccess -t on
•
to enable access
using Telnet
rootaccess -t off
•
to disable access
using Telnet
rootaccess -s on
•
to enable access
using SSH
rootaccess -s off
•
to disable access
using SSH.
Type
3.
exit
to log out of the root account.
4.
If you have disabled SSH access while
logged in using SSH, your current
session will remain active until you log
out, but all future SSH access will be denied.
!
If your VCS is part of a cluster, do not
disable root access using SSH. The
clustering feature depends on SSH
access.
Administrator password security
The
Password security
page (
Maintenance >
Administrators > Password security
) allows
you to determine whether or not administrator
passwords and the root password must meet
a minimum level of complexity before they are
accepted.
See the section
Administrator password security
for more information on this setting.
Resetting a forgotten administrator or
root password
If you forget the password for the default
admin
account or any other administrator account,
log in to the VCS using the account of another
administrator with read/write access and
change the password.
However, if you do not have any other
administrator accounts with read/write access,
or have forgotten the passwords for them all, it
is possible to set a new password for the
admin
account using the following procedure. This can
also be used if you have forgotten the password
for the
root
account:
Connect a PC to the VCS using the serial
1.
cable as per the instructions in steps 1 and 2
of
Initial configuration using serial cabl
e
.
Reboot the VCS.
2.
Login from the PC with the username
3.
pwrec
.
No password is required.
Select the account (
4.
root
or
admin
) whose
password you wish to change.
You will be prompted for a new password.
5.
The
pwrec
account is only active for one
minute following a restart. Beyond that
time you will have to restart the system
again to change the password.
