saslauthd

Dan White dwhite at olp.net
Fri May 25 22:27:56 BST 2018


On 05/17/18 14:57 +0000, Tobias Köck wrote:
>Hi,
>
>just found  a strange information in the saslauthd manpage
>
>     sasldb     (All platforms)
>
>                Authenticate against the SASL authentication database.  Note that this is prob‐
>                ably not what you want to use, and is even disabled at compile-time by default.
>                If you want to use sasldb with the SASL library, you probably want to use the
>                pwcheck_method of "auxprop" along with the sasldb auxprop plugin instead
>
>I don't understand why saslauthd with salsdb should not be used in the
>Postfix environment? At least there is no explanation why it's not what
>someboy want.

It is unusual to perform sasldb authentication via saslauthd. To do so
would limit you to plaintext authentication mechanisms only (plain/login).
saslauthd is an optional component of cyrus sasl.

Much more common is to sidestep saslauthd altogether and specify the
'pwcheck_method: auxprop' configuration line above. Postfix should not use
or need saslauthd unless you've configured 'pwcheck_method: saslauthd'.

Consult the documentation at:

https://www.cyrusimap.org/sasl/sasl/components.html

If you have any further specific questions, you can ask on the
cyrus-sasl mailing list.

-- 
Dan White



More information about the Pkg-cyrus-sasl2-debian-devel mailing list