+- Sentora Support Forums (https://senforums.mach-hosting.com)
+-- Forum: Sentora Forum Archives (https://senforums.mach-hosting.com/forumdisplay.php?fid=5)
+--- Forum: Sentora Public Support Forums v1.0.x (https://senforums.mach-hosting.com/forumdisplay.php?fid=32)
+---- Forum: Community Guides & How-To's v1.0.x (https://senforums.mach-hosting.com/forumdisplay.php?fid=33)
+---- Thread: How do I Change Default Username from zadmin to somewhat (/showthread.php?tid=1564)
Pages:
1
2
How do I Change Default Username from zadmin to somewhat - alikhan88 - 05-11-2015
Hi,
I wanted to know that how can we change the default username zadmin to someother name as it may be a security issue, anyone who knows that sentora is installed on the server knows that there should be a zadmin account , and rest remains hacking the password, as zadmin is the most powerful user. I tried to change the username by updating it in MySQL, but it seems like the name is hardcoded, as some services stopped working , I wasn't able to shadow other users. So kindly let me know if there is a way to change the zadmin name.
Thanks
RE: Change Default Username from zadmin to somewhat - Me.B - 05-11-2015
No you can't currently.
Put a strong password first.
The only alternative is modifying the authentication to map another user name to zadmin and thus refuse login to zadmin.
File to check
https://github.com/sentora/sentora-core/blob/2af9ff0d4bcb7b76859c52c2fd1c5b4af099f806/dryden/ctrl/auth.class.php
You need to understand that and don't expect more help over this.
M B
RE: Change Default Username from zadmin to somewhat - apinto - 05-12-2015
I do believe that taking a different approach to the default username would be useful in security terms.
The best way would be to ask during the install what would be the default username, that would be referenced somewhere in the DB so modules could use it.
RE: Change Default Username from zadmin to somewhat - Rick - 05-15-2015
How about changing all the 'zadmin' to a different name in every file / the databases... I guess it would work then..
RE: How do I Change Default Username from zadmin to somewhat - Me.B - 05-15-2015
(05-15-2015, 09:04 PM)Rick Wrote: How about changing all the 'zadmin' to a different name in every file / the databases... I guess it would work then..
Nope
RE: How do I Change Default Username from zadmin to somewhat - dsmarter - 02-12-2017
Haha, I know that changing the database alone doesn't work (it fails to load the login page). If it was just a few files, I could do a find and replace, but I suspect it must be more than a few.
RE: How do I Change Default Username from zadmin to somewhat - TGates - 02-12-2017
The only way to do it is either re-code it to check for ac_id_pk = 1 instead of ac_user_vc = 'zadmin' making user account #1 the main account (best way)
--or--
add a new user DB table something like 'ac_zadmin_gd' where 1=zadmin user/0=all others ( ac_zadmin_gd = 1 instead of ac_user_vc = 'zadmin') and re-coding everything to look for this new flag instead of zadmin (the way most user-based systems work). This would also allow for more than 1 'God' account which could be a security risk, easily bypassed through phpmyadmin, and would also break the use of the command line 'setzadmin' function.
I found 6 files with 'zadmin' hard coded. It would 'appear' to be easy enough to convert this to either one of the above mentioned solutions.
By using either one of the above suggestions, you could allow the admin to change the username manually in the database (or edit the installer to ask for a 'god user' name).
RE: How do I Change Default Username from zadmin to somewhat - TGates - 02-12-2017
I have this working in a test environment. @[Me.B] I could do a pull request for you to review it. But first I think we need to discuss if this would cause problems down the road. Also, we need to sort out the pros and cons of changing the name. This should be set during install. (Default=zadmin[else]custom)
One positive right off the top is better security - if each install has a different username, hackers would have to try both username and password.
RE: How do I Change Default Username from zadmin to somewhat - Me.B - 02-13-2017
You can send the pull request but we are freezing the master branch for next release hope we can get thru the testing.
M B
RE: How do I Change Default Username from zadmin to somewhat - TGates - 02-15-2017
Ok, will hold off on the PR until this release is done to save any confusion. It will need some extensive testing to ensure there are no conflicts.