Don't include a usable default user in the config - enabling this user undermines switching security on in the first place. --------------------------------------------------------------------------------------------------------------------------- Key: AS7-2678 URL: https://issues.jboss.org/browse/AS7-2678 Project: Application Server 7 Issue Type: Task Components: Domain Management, Security Reporter: Darran Lofthouse Assignee: Darran Lofthouse Priority: Critical Fix For: 7.1.0.Beta1 We need a line in the file to demonstrate the format of a user but having a default working user with a password undermines the security we are enabling by default is guessing the password is simple. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa For more information on JIRA, see: http://www.atlassian.com/software/jira