You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@karaf.apache.org by "Christopher Lockard (JIRA)" <ji...@apache.org> on 2017/11/16 21:27:00 UTC

[jira] [Created] (KARAF-5487) SshRole restriction not enforced when using username/password

Christopher Lockard created KARAF-5487:
------------------------------------------

             Summary: SshRole restriction not enforced when using username/password
                 Key: KARAF-5487
                 URL: https://issues.apache.org/jira/browse/KARAF-5487
             Project: Karaf
          Issue Type: Bug
    Affects Versions: 4.1.3
            Reporter: Christopher Lockard


 In https://issues.apache.org/jira/browse/KARAF-5330 a role (sshRole) was added that was required for users to ssh into the karaf instance. However that role check only was applied to the username/public-key method and not the username/password method. Currently any user can ssh into the system using username/password regardless of their roles.

This appears to be fixed in master but not the karaf-4.1.x branch



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)