[ https://issues.apache.org/jira/browse/KARAF-5487?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Work on KARAF-5487 started by Freeman Fang. ------------------------------------------- > SshRole restriction not enforced when using username/password > ------------------------------------------------------------- > > Key: KARAF-5487 > URL: https://issues.apache.org/jira/browse/KARAF-5487 > Project: Karaf > Issue Type: Bug > Affects Versions: 4.1.3 > Reporter: Christopher Lockard > Assignee: Freeman Fang > > In https://issues.apache.org/jira/browse/KARAF-5330 a role (sshRole) was > added that was required for users to ssh into the karaf instance. However > that role check only was applied to the username/public-key method and not > the username/password method. Currently any user can ssh into the system > using username/password regardless of their roles. > This appears to be fixed in master but not the karaf-4.1.x branch -- This message was sent by Atlassian JIRA (v6.4.14#64029)