-other auth -pam if user exists but has no passphrase -keystone? -ad? (specialized to the AD case) -expressionkeys never gets smaller - perf impact -When a user account is changed, have httpapi and sockapi notified of changes to kill off related sessions. password changes are given a pass, but user deletion will result in immediate session termination -When the time comes to dole out configuration/discovery, take page from xCAT 'flexdiscover' command, if possible bring an ipmi device under management by way of ipv6 to eliminate requirement for ip to be specified. Requires the polling event support (which is required for security anyway) -Change the remote timeout behavior to yield a response, then have pluginapi decides whether to error the response or a message indicating error in case of multi-node request -this stack trace (happened with method was set to ""): Traceback (most recent call last): File "/usr/lib/python2.6/site-packages/eventlet/wsgi.py", line 402, in handle_one_response for data in result: File "/home/jbjohnso/Development/confluent/confluent/httpapi.py", line 301, in resourcehandler cfgmgr, querydict) File "/home/jbjohnso/Development/confluent/confluent/pluginapi.py", line 273, in handle_path passvalue = pluginmap[plugpath].__dict__[operation]( KeyError: '' -have pyghmi and friends do multiprocessing pools