Good day.
The docs say:
Installing via Kaui
In order to deploy a plugin via Kaui, you need to do the following:
Open Kaui.
Click on the Plug Icon at the top and click on kpm.
Click on Install New Plugin.
Click on the Download icon next to the plugin that you wish to install.
Refresh the page after a while.
Once the plugin download is complete, it will appear in Stopped status. Click on the Start button next to it to start the plugin.
However after changing the admin password, this does not function. The error is:
{"@timestamp":"2026-03-07T11:32:28.653Z","message":"Error when install pluginKey: 'analytics' with coordinate. Exception: No account information found for authentication token [org.apache.shiro.authc.UsernamePasswordToken - admin, rememberMe=false] by this Authenticator instance. Please check that it is configured correctly.","logger_name":"org.killbill.billing.osgi.bundles.kpm.impl.DefaultPluginManager","thread_name":"bus_ext_events-th","level":"ERROR"}
Kaui goes through the motions as described in the manual. But the plugin is never installed.
There is a shiro user:
$ cat shiro.ini
[users]
admin = <custom password>, admin
[roles]
admin = *.*
And I logged into kaui with admin user and that password.
Notes:
It seems the kpm password may be hardcoded as the default password? This seems suboptimal. There may be properties that can change this, though I haven't discovered the exact incantation yet. Pointers here would help.
It seems it may be possible to install plugins manually though the apis. Though the Kaui system is very nice. It would be a shame not to be able to use it on secured systems. But if this is the only way, then clarification would be helpful.
While there may be workarounds, security is important and hardcoded passwords might discourage some from properly securing their systems. Might be better to fix.
Thank you.