No one knows the password not in welcome email

[PCS]

Hi there, we are new to Vodia, just getting multi tenant setup.

When we create a new extension it asks us to create a pin (no problem, we then know what this is) but it has a place to auto generate a web password and auto gen a sip password, but when the email comes through it does not list the password, so the user does not know it and neither do we.

Also in the URL for loggin in it shows the IP address and not the DNS URL

How can this be resolved?

All we get in the welcome email is the following:

• The name which was set for your account: <Users Name>
• Your extension number: 10
• Name of your domain: <our domain name>
• Company name: <tenant name>
• Position:
• Building:
• Department:
• Call your mailbox: 10
• URL for logging in: <url for login in but in IP format>

Thank you.

Karl

[Vodia PBX]

You will have to address the problem with the IP address. In a nutshell you need to create a DNS entry for each tenant and set it as address. Then if port 80 is open, the system should be able to fetch a certificate for that tenant, so that you can log in using that DNS address without the browser complaining. HTTPS is essential for using the apps, and also for the users to login, because modern browsers are not happy sending passwords over insecure lines.

As for the password, thats a longer story. There is no real need for a user to have a password any more (what is your WhatsApp password). The email is like a password reset email. Once you click on the login link, the browser should set a passkey for the account which the user can use next time for logging in, and if not a passkey, set a session token that is good for 30 days (default). If that passkey gets lost, well send the password reset email and do it again. But you can still do it "old school" and enable passwords for the extensions in the /reg_usr_control.htm page. However passwords are creating a lot of problems, especially when users use the same password in multiple accounts and one of them gets hacked. That's why we like to see users use passkeys. 

[Scott1234]

10 hours ago, PCS said:

 

You might simply just need to go to, Settings -> Security -> General -> and edit "Include extension password and PIN in user welcome email" settings. 

[PCS]

With regards the IP address showing, this is already set with DNS

There is a DNS entry for each tenant, and the correct ssl, it is just the welcome email putting in the IP and not the FQD, so in the welcome email the correct FQD is showing under "Name of domain:" but under the "URL for logging in:" this shows the IP address and not the FQD

 

As for the password, so I do see what you are saying, but lets say they go and buy their own desk phone, how can they configure and set it up if they do not know the extension password? and again, if they click the url for logging in it presents them with the username and password so the username will be the extension, but who knows the password?

[PCS]

On 3/21/2024 at 3:46 AM, Scott1234 said:

You might simply just need to go to, Settings -> Security -> General -> and edit "Include extension password and PIN in user welcome email" settings. 

Thank you, found it and resolved most of the issues other than the "URL for logging in" showing as the IP address rather than the fully qualified domain name.