saslauthd performance anxiety

[John Alton Tamplin]

Paul M Fleming wrote:

>Timing out the passwords is simple ( I think ) I would store the time
>when the entry is added and force a reauth if the password has been
>cached longer than a timeout (for example one hour ). That forces a
>reauth at least every timeout period of time. If an entry isn't in the
>cache (or if it is different the entry would be removed and ) a reauth
>would be forced. Every successfull auth would be added to the cache. 
>  
>
Also, if the authentication against the cached entry fails it should be 
refreshed and tried against the new one, so that if the user changes 
their password the caching is transparent.

-- 
John A. Tamplin                               Unix System Administrator
Emory University, School of Public Health     +1 404/727-9931