Cyrus SASL 2.1.8 Released

Rob Siemborski rjs3 at andrew.cmu.edu
Sun Oct 13 11:57:40 EDT 2002


On Sun, 13 Oct 2002, Kervin L. Pierre wrote:

> What is the difference between 'auxpropd' and 'saslauthd'?  I read the
> sasl docs and got that saslauthd only does PLAIN, but isn't that what
> auxprops do as well?  Is there functionality missing that will only be
> provided with an LDAP auxprop plugin?

Well for one, there is currently no such thing as an auxpropd.  What it
would entail is documented here:

http://bugzilla.andrew.cmu.edu/attachment.cgi?id=53&action=view

saslauthd's protocol doesn't allow the retreival of plaintext (or even
hashed) versions of the passwords so as to be usable by challenge/response
mechanisms such as CRAM-MD5 and DIGEST-MD5.  Auxprop plugins will do that.

> I'm planning to use cyrus 2.2 with LDAP users, so I'm trying to get this
> info straight.

If you're just using PLAIN, LOGIN, or the IMAP login command, you're set,
since the current saslauthd supports LDAP.

-Rob

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Rob Siemborski * Andrew Systems Group * Cyert Hall 207 * 412-268-7456
Research Systems Programmer * /usr/contributed Gatekeeper






More information about the Info-cyrus mailing list