Password Obfuscated in User Creation Email

[sirangelofyork (Angel)]

Hi All,

When I create a new user and their creation email is sent, the password is obfuscated. I changed password requirments and change password on first login.

Here is the message setup:

Your %brand% Account

Hi ${fname},

Congratulations! Your ${brand} account has been created! You can now use the credentials below:

Username: ${username}
Password: ${password}

To login to the following services:

${services}

Thanks,
The ${brand} Team

And this is what gets sent:

Hi X,

Congratulations! Your FreePBX account has been created! You can now use the credentials below:

Username: X
Password: Obfuscated. To reset use the reset link in this email

To login to the following services:

Anyway to fix this? Would make it a lot easier with this working to send passwords to a bunch of users!

[tonyclewis (Tony Lewis)]

That would be so insecure and violate proper security processes. You never email passwords.

[sirangelofyork (Angel)]

These are new user temporary passwords. The super long ones that freepbx generates.

[tonyclewis (Tony Lewis)]

FreePBX does not have concept of temporary password. FreePBX does not store the ucp password in plain text so it has no way of emailing the clear text password.