200ICP Rls 3 - No GUI access if Installer P/W changed

[MitelInMyBlood]

200ICP S/W vers 3.0.2.5

This topic was actually touched upon briefly in another more generalized thread but I wanted to reopen it in a completely separate discussion topic of its own because I think the problem is more pervasive than originally thought.

What I have discovered is that if you change the INSTALLER password from anything but the default value then afterwards the INSTALLER has NO ACCESS at all from the GUI.

It doesn't matter where you change the INSTALLER level P/W, whether you do it via the GUI or via TELNET or MAINTENANCE TERMINAL, once changed, the INSTALLER no longer has GUI access.

That is a BUG.

 

[paterson]

Yep, doesn't work for me either. I usually leave my lab systems at default. I just changed the installer password on one and now I cannot access through the web page.

I am curious though. If you upgraded to Rel 3, would the previously changed installer level password (Pre Rel 3) still work. I need to find a system to try it with and I will report back.

 

[paterson]

I just upgraded another 200icp. This one had an installer level password that was not default (1000) before the upgrade. After the upgrade to rel 3, there was no problem accessing through the web gui with the non-default password. BUT, I then changed the password and cannot access through the web gui. I then used Telnet and changed the password back to the original non-default password from the upgrade. IT NOW WORKS!!! I think that maybe the java stores what the first login was and tries matching it what you enter in.

I then took another machine that had all default passwords that had never been accessed through the web gui. I tried logging in with MAINT1, but it would not let me. Just an FYI. My thinking was that if the first attempted login was with MAINT1 it might work.

 

[MitelInMyBlood]

1-800-561-0860

You have been delegated to call it in ;-)

 

[paterson]

I actually don't have tech ID. I have to get a parent company to report it. Big hassel!!

 

[TheMitelGuy]

Actually, as long as you know about the issue, you are able to reproduce it, and you know it's a bug, you can open a ticket, as long as your company is an authorized Mitel dealer (no tech ID required). Remember: if you don't have a tech ID and the problem is not a "bug" expect to use a technical credit.

 

[MitelInMyBlood]

Either way if you call to open a ticket you have to pay penance while sitting in the queue listening to a 5~10 minute medley of Zam Fir on the pan flute ;-)

 

[TheMitelGuy]

Well, we have two music sources, that and "Mitel.. (dadadada) It's about You.... Mitel (dadadada) It's about You..." What would you rather hear?

 

[mitelman]

I like the Anne of Green Gables soundtrack myself. I was thinking about submitting a DCR on the subject as a joke, but think it might upset my TAM...

 

[MitelInMyBlood]

My TAM sez (this is straight from the horse's mouth)

It's not a bug.
The GUI login password (installer) appears in two locations and must be changed in both places.

1) In the maintenance interface:
System/Set/Password/Installer

2) Also in the CDE interface in form 28

If you change both (and make them identical) it's supposed to work.
I'm taking his word for it, I won't get the chance to test it before Wednesday of next week.

My TAM sez PS claims this was mentioned in the release 3 training module, although I sure don't recall seeing it, quite possible that I missed it tho.
But he also sez they're going to put it in an upcoming TB in the knowledge base on MOL.

 

[mitelman]

Your TAM is partially right. Make sure that when you are testing, Change all the passwords in maint and cde to match for the different users. Make the installer and maint1 passcodes different from default and try to login via the guiwith both users. We can only log in with installer here. This is a pain for us as we use maint1 for regular maint for security reasons.

 

[MitelInMyBlood]

The story I heard on that is it was 'design intent' to limit the GUI access to the Installer level, for a number of reasons.

None the least of which is it is the only access level which is 'wide open' to both MTCE and CDE rights.
The GUI also provides onscreen HELP which arguably you might NOT wish to have available to lesser trained subordinates at the lower access rights.

Aside from that (and a mouseable interface) I didn't see where the GUI brought anything to the table that the secure telnet and maintenance ports don't already offer.
Therefore, if you've trained your admin to use Maint1 with Telnet or Hyperterminal, then they simply continue doing so and life goes on.

The GUI is nice but in the grand scheme of things the addition of the GUI was (IMO) really just a minor item on the list of many additional features in release 3.

 

[pandabear1]

The Gui uses the password from the Maintenance side only, therefore your maintenance and cde password must be the same. Hopefully Mitel will fix this so you can go in under any one of the 5 usernames and use something other than the maintenance side.