gholt/swauth — Issue #24: (feature request) allow multiple passwords per user to enable credential rotation
Author: maplebed
Created: 2012-02-29 18:49:23+00:00
State: open

In order to change a user's password when the clients are distributed and the system is under production load, it is useful to be able to manage multiple passwords per user, to enable a phased change.

* create new password
* change clients configuration
* revoke old password

Amazon describes this process here: http://docs.amazonwebservices.com/AWSSecurityCredentials/1.0/AboutAWSCredentials.html#CredentialRotation