Christopher Lockard created KARAF-5487:
------------------------------------------
Summary: SshRole restriction not enforced when using
username/password
Key: KARAF-5487
URL: https://issues.apache.org/jira/browse/KARAF-5487
Project: Karaf
Issue Type: Bug
Affects Versions: 4.1.3
Reporter: Christopher Lockard
In https://issues.apache.org/jira/browse/KARAF-5330 a role (sshRole) was added
that was required for users to ssh into the karaf instance. However that role
check only was applied to the username/public-key method and not the
username/password method. Currently any user can ssh into the system using
username/password regardless of their roles.
This appears to be fixed in master but not the karaf-4.1.x branch
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
