Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

sa password is blank?

Folks,

Why does callmanager does not change the password of sa after the install? It asks for SQL password and still the sa passwors is blank and any odbc source can connect to the callmanager database when connecting to it??

why such a big security hole? any reason behind it? what can we do to secure callmanager database?

3 REPLIES
Bronze

Re: sa password is blank?

The SA password is an SQL only password, and is not altered in anyway during an Administrator password change. Changing the SA password is OK, however it is detailed on how to do this in Microsoft's documentation under the MSSQL Server 7.0, under Books Online due to the fact that it does not really factor into day-to-day CallManager issues.

Silver

Re: sa password is blank?

Starting with 4.0, the database gets installed using NT authentication instead of the SQL sa authentication, unless you do a co-resident install with IPCC and then I am pretty sure it changes it to mixed mode. I am surprised you actually get into the database with blank sa password:

Introduction

In order to make administration of Cisco CallManager 4.0 easier, authentication has changed from 'SQL Server and Windows' to a 'Windows Only' authentication. In the past, a separate account and password was required in order to access the SQL database on the Cisco CallManager server after the initial Windows logon to the server. In Cisco CallManager 4.0, you only need to logon to Windows in order to gain access to the SQL database. This was done so users would not have to remember their SQL Server system administrator (SA) passwords after their initial install. For additional information refer to the Cisco CallManager Installation Documentation

http://www.cisco.com/en/US/products/sw/voicesw/ps556/products_tech_note09186a00801f9f33.shtml

Mary Beth

Cisco Employee

Re: sa password is blank?

You did not mention what release of CCM you were running. There was a bug in some release where the SA password would not be set, left blank. You should be prompted at the beginning of the install to set an SA password. Once the install is complete the passsword you selected should be set.

CSCea23485

The SA password can be changed in SQL Enterprise Manager, make sure that the SA account is the same on all nodes.

Mike

236
Views
0
Helpful
3
Replies
CreatePlease login to create content