saslauthd + ldap still experimental?

Igor Brezac igor at ipass.net
Fri Dec 27 14:41:47 EST 2002


On Fri, 27 Dec 2002, Jules Agee wrote:

> Is saslauthd's auth_ldap module still considered experimental?
>

I use it in production.

> Would using this allow imap authentication methods other than PLAIN or
> LOGIN to be used, if the configured LDAP authentication method was

You can only use PLAIN or LOGIN mechs.

> if the configured LDAP authentication method was
> 'custom' (crypted userPassword) rather than 'bind'?

saslauthd verifies the password when 'custom' is used.  Otherwise, the
ldap server checks the password ('bind' method).  The 'custom' method is
up to 3 times faster because saslauthd 'custom' method uses fewer ldap
queries.

-- 
Igor






More information about the Info-cyrus mailing list