[
https://issues.apache.org/jira/browse/KARAF-3625?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14482885#comment-14482885
]
Jean-Baptiste Onofré commented on KARAF-3625:
---------------------------------------------
I found the commit that introduced the issue:
{code}
commit d0bd2d5fc58f6f7c97b561a97911a77a67cd6860
Author: Guillaume Nodet <[email protected]>
Date: Tue Jul 15 17:12:16 2014 +0200
[KARAF-2910] Properties login module seems to leak a PropertiesInstaller
reference results in OOM
[KARAF-2760] monitor etc/user.properties change with felix FileInstaller
{code}
> Password encryption doesn't work
> --------------------------------
>
> Key: KARAF-3625
> URL: https://issues.apache.org/jira/browse/KARAF-3625
> Project: Karaf
> Issue Type: Bug
> Components: karaf-security
> Affects Versions: 3.0.3, 2.3.8, 2.3.9, 2.3.10, 4.0.0.M2
> Reporter: Jean-Baptiste Onofré
> Assignee: Jean-Baptiste Onofré
> Priority: Critical
> Fix For: 2.4.2, 3.0.4, 2.3.11
>
>
> With encryption.enabled=true in etc/org.apache.karaf.jaas.cfg configuration
> file, Karaf should encrypt the password in etc/users.properties (prefixing
> and suffixing with {CRYPT} keyword).
> However, the password are not encrypted in the etc/users.properties.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)