Managing users and passwords

The default security configuration uses a property file located at <RuntimeContainerPath>/etc/users.properties to store authorized users and their passwords. The default user name is tadmin and the associated password is tadmin too. We strongly encourage you to change the default password by editing the above file before moving Karaf into production.

The users are currently used in three different places in Karaf:

• access to the SSH console

• access to the JMX management layer

• access to the Web console

Those three ways all delegate to the same JAAS based security authentication.

The users.properties file contains one or more lines, each line defining a user, its password and the associated roles:

user=password[,role][,role]...