Can I use hashed password for ldap_bind_pw in saslauthd.conf?

Igor Brezac igor at
Thu Oct 6 10:16:12 EDT 2005

If you know of a really effective two way hash, please submit code.

Otherwise you can use sasl and you will not need to specify the password 
in saslauthd.conf:

ldap_use_sasl: yes
ldap_server: ldap:///
ldap_mech: DIGEST-MD5


On Thu, 6 Oct 2005, Raymond T. Sundland wrote:

> chmod 400 saslauthd.conf
> If someone has enough access to read the file at this point, they have enough 
> access to modify your LDAP database files using the 'slapcat' and 'slapadd' 
> commands, so any additional security of a hashed password would be useless.
> he.tao at wrote:
>>  It's really a bad idea to use clear text..
>> ------------------------------------------------------------------------
>> ----
>> Cyrus Home Page:
>> Cyrus Wiki/FAQ:
>> List Archives/Info:


More information about the Info-cyrus mailing list