In the current implementation, oscm realm and file-based tomee realm are active. The tomee admin must authenticate in both of them.
The file-based tomee realm should be initialized with with platform operator credentials in order to login to the tomee admin UI.
The platform operator will change his initial password. So there are 2 possibilities:
- expose the users file to persistent store to be available for changes (needs probably restart of docker container - not good)
- remove the file-based realm, keep only oscm realm. In case of failed oscm installation, the tommee admin GUI will also be unavailable.
The second option seems to be more convenient, since normally the operator should check the logs why an installation fails, the UI admin console is not really necessary,