>>>>> Jean-Baptiste Onofre <j...@nanthrax.net>:

> Hi,
> It’s has been discussed on the mailing list already (I don’t remember who 
> reported this).

> The change we did is that etc/users.properties has the karaf user commented 
> now (for security reason).

Right. I noticed yesterday, when rolling the .deb package for karaf 4.3.2. :-)
 
https://steinar.bang.priv.no/2018/01/23/installing-apache-karaf-on-debian/#comment-15646

I don't know if I have any users for the .deb, besides myself, but just
in case, I guess I should make a note about the ssh change...?

A side note on this: the .deb locks down the /etc/karaf directory
because of the username/password thing (no public read access and owned
by user karaf, group karaf)

> However, etc/users.properties is still part of the karaf distribution. But, 
> as it contains only comments now, I suspect pax-exam-karaf to not include it 
> in the core distribution run. Karaf itests use it, so, it should be minor.

Yes, I suspected it was releated to the commenting out in some way.

> A simple workaround is to include your own users.properties in the pax-exam 
> option.

Thanks! I will look into this.

> I will check and create Jira for 4.3.3.

Thanks!

One note on the ssh thing: is there a Jira on being able to use ssh keys
instead of username/password in the karaf ssh?

If not, should I make one?

Reply via email to