I strongly dislike the way to change
password frequently.
Password is designed for user to recognize himself for
authentication.
Frequently changing password make password itself meaningless to
user.
As it is VNC password, this will almost make vnc unaccessible to
user.
Personally, I dislike to use browser to console the VM at all.
I suspect whether there is
a justification reasonable enough
to take the way that "changing password".
So please exactly clarify what
threat this "change
password" strategy is protecting against?
On 5/20/2014 11:27 PM,
shaohef@linux.vnet.ibm.com wrote: