MeetingPlace Web sa Account Password Change with the osql Command [Cisco Unified MeetingPlace]

Document ID: 50208

Introduction
Prerequisites
      Requirements
      Components Used
      Conventions
Change the Password
Related Information

Introduction

The installers for Cisco MeetingPlace Web default to using an account named "sa" with a blank password for access authentication to the Cisco MeetingPlace Web database. The use of the sa account and the blank password represents a big security risk to customers.

Prerequisites

Requirements

There are no specific requirements for this document.

Components Used

The information in this document is based on these software versions:

Cisco MeetingPlace Web (all versions)

The information in this document was created from the devices in a specific lab environment. All of the devices used in this document started with a cleared (default) configuration. If your network is live, make sure that you understand the potential impact of any command.

Conventions

For more information on document conventions, refer to the Cisco Technical Tips Conventions.

Change the Password

Customers should change the sa password to a non-blank one with this procedure:

Change the password of the sa account used by the Microsoft Desktop Engine (MSDE):
1. Go to Start > Search > For Files or Folders to locate the osql.exe file on the Cisco MeetingPlace Web server. (This assumes that MSDE is installed along with Cisco MeetingPlace Web, because the osql.exe file comes from MSDE.)
2. Open a DOS window and navigate to the location of osql.exe.
3. Issue the osql –U sa –P command and press Enter. The prompt changes to >.
4. Issue the sp_password NULL, ‘newpassword’, ‘sa’ command. Replace the variable newpassword with your desired value. Press Enter.
  
  Note: You must have the single quotes around newpassword and sa.
5. Issue the go command and press Enter. The system returns the message, “Password changed.”
6. Issue the exit command and press Enter.
  
  In the DOS window, the complete sequence resembles this example, in which the password is changed from blank to "abc123":
```
C:\Program Files\Microsoft SQL Server\80\Tools\Binn>osql -U sa -P
1> sp_password NULL, 'abc123', 'sa'
2> go
Password changed.
> exit
C:\Program Files\Microsoft SQL Server\80\Tools\Binn>
```
Modify Cisco MeetingPlace Web to use the new password:
1. Go to Start > Run and issue the regedit command.
2. Go to to \HKEY_LOCAL_MACHINE\SOFTWARE\Latitude\MeetingPlace WebPublisher\ODBC\.
3. Double-click the key DataSource and change its string value:
```
from:     MPWEB;UID=sa;PWD=;
to:       MPWEB;UID=sa;PWD=newpassword;
```
4. These three new registry values are required so that future upgrades install properly:
```
DBName
DBPassword
DBUserID
```
  If you have already installed MeetingPlace Web 4.2.7 or later, these three keys are there already. If you are still on a version earlier than 4.2.7, then you must create them and set them to the correct values manually.
  
  Note: For security reasons, the password has been blanked out in the sample screenshot. In actual practice, there would be a string value as part of the password.
5. To create a new registry string value, go to Edit > New > String Value.
6. Change the name of the string value to DBName.
7. Double-click DBName to open the edit window. You can now enter a value for DBName. This value is typically MPWEB.
8. Repeat Steps E to G for the other two string values of DBPassword and DBUserID. For DBPassword, enter your new password. For DBUserID, enter the user ID, which is typically sa.
  
  Note: The values you assigned to DBName, DBPassword, and DBUserID should match the values in DataSource.
Configure Open DataBase Connectivity (ODBC) to use this new password.
1. Go to Start > Programs > Administrative Tools > Data Sources (ODBC).
2. Click the System DSN tab.
3. Highlight MPWEB and click the Configure button.
4. Click Next.
5. On the second screen, perform these steps:
  1. Verify that "With SQL Server authentication using a login ID and password entered by the user" is selected.
  2. Verify that the login ID is "sa", and then enter the new password that you have just implemented.
  3. Verify that "Connect to SQL Server to obtain default settings for the additional configuration options" is checked.
  4. Click Next to move on to third screen
6. Perform these steps on the third screen:
  1. Verify that "Change the default database to:" is set to MPWEB.
  2. Click Next to move to next screen.
7. Click Finish
8. Click Test Data Source.... You should get the response, "TEST COMPLETED SUCCESSFULLY!" Click OK.
9. Click OK to finish.
Reboot the server.