A request to use an easy-to-remember passoword for the admin console kicked of some kitchen talk over here.
There are two opposite opinions: Ease of use for Devs vs. safety-net for Ops.
a) Apache Karaf Way: Change the credentials to admin/admin - instantly ready for rumble in development.
b) Apache Tomcat Way: Disable console by default with a hint where to configure the access.
virgo-dev mailing list