Passwords/Logins CS1000E 7.0 1

[RyanEOD]

Ok, I know there are tons of posts on passwords and I have searched through them, but I am running into problems this morning. So, when I log into the Unified Communications Management through the web, I see a list of logins, my admin account and then two custom ones, admin0 and admin1, which have full rights. I was having problems when trying to SSH into the switch with the admin1 login/password, I kept getting an authentication failed error. So, I went into the User Services on the web and deleted, then re-created the account admin1. Now when I try to SSH into the switch it connects/authenticates, but brings up a warning saying my password has expired and shows:

Changing password for admin1
(current) UNIX password:

So, I type in the current password, and it closes out before prompting me for a new one. I have gone through the UCM and changed the password, but I still get the same problem. I went into load 22 and printed out my PWD, but sadly none of those logins match up;

REQ  prt
TYPE pwd
PWD
  PSWD_COMP OFF
  LOUT 20
  FLTH 3
  LOCK 0
  AUDT NO

  USER_NAME PDT2
  TYPE PDT2

  USER_NAME PDT1
  TYPE PDT1

  USER_NAME ADMIN2
  TYPE PWD2
  ACCT YES
  PDT PDT1

  USER_NAME USER0
  TYPE LAPW_OVL
  OVLA  002  048
  CUST ALL
  HOST NO
  MAT  NO
  OPT  PSCD CFPD LLCD PROD LOSD FORCD MOND KCCA
  PDT NO

Help?

 

[ntTech50]

You might be able to get into PDT and change them but most likely you will be using your PASS contract. The customer did buy PASS didn't they? Because you'll be needing support from Avaya to fix their broken security issues which are numerous starting in 6.0 I'm sure with 7.5 the new Communication Manager will fix everything If you detect sarcasm you are perceptive.

 

[RyanEOD]

Yeah, it is on my in-house switch. I have PASS, I just want to make sure and check everything before calling them, because they like to charge if it is my fault. Broken security issues?? Nooooooooo

 

[biv343]

It sounds as if those accounts expired in UCM, not the CS1000. How is your account expiry configured in UCM? You can try this. Log in as nortel and SU to root. Type the following.

chage -l admin1 This will tell you if the password is expired or not. If so, do this:

chage -M 3650 admin1 This will change the expire time for that acccount to 3650 days.

You should be able to log in as admin1, if not you should at least be able to reset the password from the ucm password reset link.

 

[fritzthecat]

Hello Folks,

as far as I remeber, since Rel 6, all these passwords are gone, at first you log in with your ucm account and then create your users and also adjust your security policies, also you do not longer have pdt1 and pdt2 accounts
regards
Fritz

 

[guycable2]

when you create a user in UCM you have to give them a temporary password. Once the user is setup logout of the UCM and back in using the newly created password. You will be prompted to change your password.

This is standard for any user you setup as far as I know since 6.0.

 

[RyanEOD]

Ok, bumping this back up, now it is happening to BOTH of my accounts. I have gone through UCM and changed both their passwords, and then logged into a TTY port directly with them. This tells me the passwords are good, but when I go to use Tera Term to SSH into the switch, I keep getting:

WARNING: Your password has expired.
You must change your password now and login again!
Changing password for user admin1.
Password Change Utility

Please note that a valid password must contain at least 8 characters,
6 of which are UNIQUE from all 4 character classes (lowercase, uppercase,
digits, other characters) to be considered valid.
Your password should not contain words from any dictionary in any
language or jargon, and should not be based on any personal
or login information.


Changing password for admin1
(current) UNIX password:

I type in their current password, and get an authentication failure. Is there an UNIX password I should be looking for?

 

[RyanEOD]

biv343 - logging in with nortel, su root, forced me to reset the root password too, but once I did that, I was able to do the commands correctly and it worked. +star! Thanks!