Why is impossible to change default root password for ssh access ?

I tried many times with passwd root but nothing changes in /persistent/etc/passwd and I am able to log in via ssh only with default password which is in my opinion giant security hole because default ssh password is available to everyone in manual.

I also tried to manually change configuration for FXO and FXS ports (chan_dahdi.conf) and sip configuration in sip.conf using vi editor. I saved changes and checked those files after changes and also checked how Asterisk sees it. That configuration worked some time but when I wake up in the morning everything was messed up like device did some sort of sync with Asterisk GUI and wrote what it wanted (which is not what I want) and what is worse which is incorrect. It has written that fxo device is in other context and did similar with sip.conf ...

It must be the way to turn of that GUI and to disable those overwriting and to change default root password.

I didn't go through entire procedure of building my own firmware. I tried that ,downloaded svn source code but miserably failed at "make uBoot" step from README file. I just completed step 1 (read README file). It says "No rule to make target" like I am doing it wrongly or from wrong directory(root of downloaded files I also tried from uBoot folder with same effect) and README does not say where to do it just do "make uBoot". I am green in this so I failed to prceed and never reached step "make menuconfig".

Then I found an image "uImage-ip02-ip08-v624.img" at switchvoice web site and upgraded from Astfin to Switchfin using "Upgrade Firmware" option from GUI.

Can I disable GUI with some command via ssh without need to make my own firmware for device ? Can I just delete GUI from its folder ?

Hi uros09,

Yes it seems passwd command doesn't work as it should.
I don't think it is related with the GUI.
As work around you may calculate your 'crypth' string and put it manually in /etc/passwd for now.

The GUI password can be changed from the option menu.

Best Regards
Dimitar

I also had strange situation when I come back from work I found out device unreachable for ssh access (refusing connections before asking for password with some message about identity), and port 1 and port 2 leads not turned on and GUI unreachable too. The day before I changed just extensions.conf and commented out 2 lines (where it includes other files for which I think are calling some commands which overwrite changes and add some unwanted dialplan and configuration). After reboot I could login via ssh and saw no dahdi device has been found.I accessed GUI (after I removed ; from those 2 lines) and it shows no FXO port, no analog hardware... My /etc/dahdi/system.conf lost fxo and fxs lines.

I thought device or at least modules stopped working but after I did firmware ugrade (to same firmware it used) leds were turned on and hardware has been recognised.

I don't know what is this device doing and why it can't stay in same condition for more than half day ? (It was ok in the morning with the same configuration I left last night). It hasn't been hacked for sure because only LAN traffic has been allowed to connect to port 22. I just saw some brute force attempts to login on one sip account.

If I can suggest you might consider putting software like iptables and fail2ban in future firmware releases so device can ban brute force attackers.

It works fine. I enabled GUI and configured it and everything is fine. I can see callerid for incomming calls. Thing I can't find in GUI wchich could be useful is
to block incomming calls from some numbers (blacklist). Is there any chance to put this feature in next release of Switchfin ?