The Cyrus SASL package contains a Simple Authentication and Security Layer, a method for adding authentication support to connection-based protocols. To use SASL, a protocol includes a command for identifying and authenticating a user to a server and for optionally negotiating protection of subsequent protocol interactions. If its use is negotiated, a security layer is inserted between the protocol and the connection.
Download (HTTP): http://ftp.andrew.cmu.edu/pub/cyrus-mail/cyrus-sasl-2.1.20.tar.gz
Download (FTP): ftp://ftp.andrew.cmu.edu/pub/cyrus-mail/cyrus-sasl-2.1.20.tar.gz
Download MD5 sum: 268ead27f4ac39bcfe17d9e38e0f2977
Download size: 1.8 MB
Estimated disk space required: 17.3 MB
Estimated build time: 0.28 SBU
Install Cyrus SASL by running the following commands:
./configure --prefix=/usr --sysconfdir=/etc \
--with-dbpath=/var/lib/sasl/sasldb2 \
--with-saslauthd=/var/run &&
make
Now, as the root user:
make install &&
install -v -m644 saslauthd/saslauthd.mdoc \
/usr/share/man/man8/saslauthd.8 &&
install -v -d -m755 /usr/share/doc/cyrus-sasl-2.1.20 &&
install -v -m644 doc/{*.{html,txt,fig},ONEWS,TODO} \
saslauthd/LDAP_SASLAUTHD /usr/share/doc/cyrus-sasl-2.1.20 &&
install -v -d -m700 /var/lib/sasl
--with-dbpath=/var/lib/sasl/sasldb2: This parameter forces the saslauthd database to be created in /var/lib/sasl instead of /etc.
--with-saslauthd=/var/run: This parameter forces saslauthd to use the FHS compliant directory /var/run for variable run-time data.
--with-ldap: This parameter enables use with OpenLDAP.
install -m644 ...: These commands install documentation which is not installed by the make install command.
install -d -m700 /var/lib/sasl: This directory must exist when starting saslauthd. If you're not going to be running the daemon, you may omit the creation of this directory.
/etc/saslauthd.conf (for LDAP configuration) and /usr/lib/sasl2/Appname.conf (where "Appname" is the application defined name of the application)
See file:///usr/share/doc/sasl/sysadmin.html for information on what to include in the application configuration files. See file:///usr/share/doc/sasl/LDAP_SASLAUTHD for configuring saslauthd with LDAP.
If you need to run the saslauthd daemon at system startup, install the /etc/rc.d/init.d/cyrus-sasl init script included in the blfs-bootscripts-6.0 package.
make install-cyrus-sasl
You'll need to modify the init script and replace the [authmech] parameter to the -a switch with your desired authentication mechanism.
is the SASL authentication server.
is used to list the users in the SASL password database.
is used to set and delete a user's SASL password and mechanism specific secrets in the SASL password database.
is a general purpose authentication library for server and client applications.
Last updated on 2005-03-02 07:35:32 -0700