Even more info about SASL



Well, well, well...it seems all this work this week has fried my brain a bit.

I read over all the docs I could fine about SASL again. SASL doesn't actually support any other mechanisms over PAM than the "plaintext" machanisms, PLAIN and LOGIN. If you want to use the more secure MD5 algorithm, you are required to use the sasldb pwcheck_method. Hmm. Oh, and apparently, the "pam" argument doesn't work anymore for "pwcheck_method", because PAM support has been changed in SASL so it goes through the saslauthd daemon only.

So, I guess I'm not entirely crazy...just a little disappointed.

Posted: Mon - September 29, 2003 at 11:33      


©