nathans Posted July 23, 2011 Report Share Posted July 23, 2011 Hi, This is probably something very simple but is driving me crazy: I have a bunch of snom 300 & 821s connected and auto provisioned to a snomONE+ running the latest version of FW on all. The phones register OK and everything is working except when I try to web login to the phones: After being prompted from the admin login/password I get like a limited version of the WEB gui. I do not see the identities tab and when I go to advanced settings I can see all of the Network/Behavior/AUdio/Sip/QoS update tabs but the only thing under it is a label and a box for "Administrator Login" and a save button. (attached screen shot) I have not changed any of the default XMLs or done anything other than auto provision the phones using PnP. How do I get the full remote admin web gui? What am I missing?? Thanks! Nathan Quote Link to comment Share on other sites More sharing options...
Vodia PBX Posted July 25, 2011 Report Share Posted July 25, 2011 Check out the domain.xml in the PBX file system. There you find the domain pnp password (which you will have to use for the web login on the phones) and also the PIN that you might need to get into admin mode on the phones. Quote Link to comment Share on other sites More sharing options...
pbx support Posted July 25, 2011 Report Share Posted July 25, 2011 In the newer versions, PBX puts the phones in "User mode" instead of "Admin mode". That's why you don't see other tabs. If you want to phones to be always in the admin mode, then you will have to modify the snom_3xx_phone.xml template and restart the phone (There is <admin_mode perm="">off</admin_mode> line in that file. You can either delete the line of change the 'off' to 'on') Other option is, as posted by "snomONE" user, to use the domain "Authentication PIN" to open up the other pages. The idea was to keep away the non-admin users to login to the phone's web interface and change settings. Quote Link to comment Share on other sites More sharing options...
nathans Posted July 26, 2011 Author Report Share Posted July 26, 2011 Thanks to both. The admin and PIN pnp passwords I know as I did set them up for the domain. My problem as that I still thought that when you http to any phone provisioned by the system if you used the admin/domainpassword combination at the prompt you would get to the admin menus. If you used your user/userpassword at the prompt you will get the limited web interface. Is this not true? I thought the PIN was only used with the keypad to access settings via the phone itself. I'm a missing something? Thanks! Quote Link to comment Share on other sites More sharing options...
Vodia PBX Posted July 26, 2011 Report Share Posted July 26, 2011 I thought the PIN was only used with the keypad to access settings via the phone itself. I'm a missing something? Good point, the PBX team thought the same way but the phone team does not... IMHO a security glitch on the phones, as you can easily script the 10000 combinations for a 4-digit PIN code from the web interface. Quote Link to comment Share on other sites More sharing options...
nathans Posted July 26, 2011 Author Report Share Posted July 26, 2011 This means I can also authenticate via web to the phone using admin/pin combination? Quote Link to comment Share on other sites More sharing options...
Vodia PBX Posted July 27, 2011 Report Share Posted July 27, 2011 No, you probably has to log in by two steps. First you log in as user by using the username/password from the domain, and then you have to elevate your permissions on the phone by using the "admin" PIN. Quote Link to comment Share on other sites More sharing options...
nathans Posted July 27, 2011 Author Report Share Posted July 27, 2011 How do I elevate the permissions? Quote Link to comment Share on other sites More sharing options...
Vodia PBX Posted July 27, 2011 Report Share Posted July 27, 2011 Hmm. Not the expert here.. There must be something on the phone web interface ... Quote Link to comment Share on other sites More sharing options...
nathans Posted July 28, 2011 Author Report Share Posted July 28, 2011 Nothing I can see. Can we get an expert to tell us? Quote Link to comment Share on other sites More sharing options...
Guest madigan Posted July 28, 2011 Report Share Posted July 28, 2011 We are talking about two different things here: HTTP user name and password are only required to access the webinterface. The administrator login is entirely independent from that access and is being used to switch from user mode to admin mode or to perform a factory reset from the phone GUI. Good point, the PBX team thought the same way but the phone team does not... IMHO a security glitch on the phones, as you can easily script the 10000 combinations for a 4-digit PIN code from the web interface. I'm not really familiar with snomONE so I'm wondering why this PIN (provisioned through the PBX) is limited to 4 digits only. The administrator password (from phone perspective) is not restricted to 4 digits but can contain letters or special characters (and much more than 4) I'm a bit confused as to what you are referring to as elevating permissions.. You can easily change the provisioning template to enable admin mode by default: <admin_mode perm="">on</admin_mode> But be careful with that- you might run into trouble similar to this (which I believe was the reason why the default value had been changed..) Quote Link to comment Share on other sites More sharing options...
pbx support Posted July 28, 2011 Report Share Posted July 28, 2011 snomONE used to allow the full access to the phone web interface recently (when you do the PnP). But we heard a lot of customers complaing that the end users somehow changes the phone config and then call the admin for support! So, since last bugfix release, we put the phone's web interface into the user mode on a succesful PnP. You can still become the admin on the phone's web interface by entering "Adminsstrative PIN"(on the phone) as "Domain->Settings: Authentication PIN" (set on the PBX). This PIN can be any number (need not be 4 digits). If you didn't set one, then PBX will create a random PIN and you need to dig into the domain xml file to see what that is. As mentioned earler, if you want the old behaviour as the default behaviour, then you can customize the snom_3xx_phone.xml file. You can follow the "first method" described in http://wiki.snomone.com/index.php?title=PnP_Customization to achieve that. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.