st_configread user in ST91 MYSQL database

[catatonique]

Hey Guys,

There are some extra user accounts in the Shoretel 9.1 MYSQL database. Does anyone know what their passwords are? I need these for some reports that I am generating that need to read the config database.

Here are the user accounts:
st_configread
and
shoreadmin

st_configread has limited read only access to tables.

[Palitto Consulting]

I would recommend that you either use the root user (bad) or create your own user that has access to what you need (good). Alternatively, since you have root access, you could grab the password hash of these users and attempt to crack it. You could also ask ShoreTel for it or try using SysInternal's strings utility on their binaries and look for the password string near the desired username.

[nschnell]

they all follow the same naming scheme... i.e. the user for st_cdrreport is passwordcdrreport; st_configread password is passwordconfigread, etc. I just had to play with this last week to figure it out.

[catatonique]

Thanks, that worked. the password is "passwordconfigread" I prefer to use that user, because it has limited access to the table data.