On 11/17/2010 04:23 AM, Gerd Hoffmann wrote:
But the later let's a management tool implement arbitrarily complex
expiration policies.


Hmm, we could do this:

set-password $protocol $secret
expire-password $protocol [ now | never | $seconds ]

Comments?

I would be happy with this. I don't mind a bit of policy creeping into qemu as long as we're exposing the underlying mechanisms.

If it were me, I'd do:

set-password $protocol $secret
unset-password $protocol
expire-password [never | $seconds]

And I would implement expire-password in terms of unset-password.

Regards,

Anthony Liguori

cheers,
  Gerd




Reply via email to