public String getPassword(String userPrincipal)
throws GeronimoSecurityException {
refreshUsers();
if (users.getProperty(userPrincipal) == null) {
log.warn("getPassword() User="+userPrincipal+" does not exist.");
throw new GeronimoSecurityException("User principal="+userPrincipal+" does not exist.");
}
String realPassword = users.getProperty(userPrincipal);
if (realPassword != null) {
realPassword = (String) EncryptionManager.decrypt(realPassword);
}