[arm-allstar] Password in iax.conf

[Doug Crompton]

This is a gross error on Allstar's part! We do not allow that. They
apparently have changed it so you can set any password you want which is
really not a good idea. The assigned password for new nodes is random and
12+ characters. There is no reason to change it from that. The old
convention was 6 digits which is not very secure but better than some of
the passwords it now allows you to assign. This is not something you need
to remember on a daily basis or even at all until you set that node up
again at some point. It is for registration only and if you write it down
somewhere you will always have it and even if you don't you can always go
to the allstar site and look it up. Using simple passwords is becoming more
and more a problem in the Internet world! I recommend NOT changing it from
what is now being assigned for new users.

Hamvoip assigns 12 digit random character/letter passwords you do not
change. No two nodes have the same password.


*73 Doug*

*WA3DSP*

*http://www.crompton.com/hamradio <http://www.crompton.com/hamradio>*

On Sun, Dec 22, 2019 at 6:03 PM "Bryan St Clair via ARM-allstar" <
arm-allstar at hamvoip.org> wrote:

> iax.conf us the only spot you needed to match up to the password found in
> the portal for your node.
>
> Using the same one across the board is just bad security practice, but no
> rule against it.
>
> The other spots you change in config area is not the same purpose as
> registration.
>
> Why make it simple matching password? It's a password you should only use
> and set once.  The most complex and secure the better.
>
>
> On Sun, Dec 22, 2019, 13:58 "Orrin Winton via ARM-allstar" <
> arm-allstar at hamvoip.org> wrote:
>
> > The following came up in a discussion (not on this list) and i want to
> run
> > it by y'all.
> >
> > If i go to allstarlink.org, then click on => Portal => Node Settings.
> For
> > each of my nodes, there is a password. I changed the passwords to
> something
> > simpler than the long passwords they provide. In other words, all three
> of
> > my nodes have the same password because i made it so.
> >
> > Is that OK? One helpful friend say it is a possible source of connection
> > problems.
> >
> > Then i went  into /etc/asterisk/ and nano iax.conf. This is hamvoip.
> >
> > One line reads:  register => 12345:Blahblah00 at register.allstarlink.org
> >
> > ... where 12345 is my node number, and Blahblah00 is my node password
> from
> > the allstarlink.org site. (Real passwd is not that.) Then there is a
> > stanza
> > that looks like this, and my node# and password goes in it:
> >
> > [radio-proxy-out]
> > type=peer
> > host=
> > ; add your node number as username
> > username=12345
> > ; add your node password as secret
> > secret=Blahblah00
> > auth=md5
> >
> > Then further down is a stanza, with my info:
> >
> > ; Example for Android/Iphone Zoiper/IAXRPT phone connections
> > ; Commented lines below must be configured to your settings
> > ; See the iax-rpt or zioper howto at hamvoip.org
> >
> > [wn1z]   ; The stanza is the Username from the phone app
> > type=friend
> > context=phone-iaxrpt
> > host=dynamic
> > auth=md5
> > secret=Blahblah00   ; PASSWORD
> > disallow=all
> > allow=ulaw
> >
> >
> >
> > So, is it okay to change the Password like this? I am able to be
> connected
> > to the Allstar system for hours at a time, maybe days, so i suspect it's
> > okay. But i want to eliminate this as a config problem. ... (I know the
> PIN
> > is unchangeable; i use that for Telephone Portal access, but that is a
> > different subject.)Thanks for comments.
> >
> > 73 de wn1z
> > Orrin
> > _______________________________________________
> >
> > ARM-allstar mailing list
> > ARM-allstar at hamvoip.org
> > http://lists.hamvoip.org/cgi-bin/mailman/listinfo/arm-allstar
> >
> > Visit the BBB and RPi2/3/4 web page - http://hamvoip.org
> >
> _______________________________________________
>
> ARM-allstar mailing list
> ARM-allstar at hamvoip.org
> http://lists.hamvoip.org/cgi-bin/mailman/listinfo/arm-allstar
>
> Visit the BBB and RPi2/3/4 web page - http://hamvoip.org
>