Am 19. August 2011 12:02 schrieb Guido Trotter <[email protected]>: > On Fri, Aug 19, 2011 at 10:59 AM, Andrea Spadaccini > <[email protected]> wrote: > >> I don't know how it works for VNC, though, but I suspect it is similar. >> >> However, if one needs a better auth method, there's always x509. >> >> I will ask this question in the qemu-kvm mailing list or IRC channel. >> > > If there is none we can always set a random one via cmdline and then change > it. > Then exploiting the race condition requires also node local access, > reading the random one and using it before ganeti changes it...
Yes, I was thinking about something in this direction. It's already much better than the current solution. utils.GenerateSecret should do. Michael
