%general-entities; ]> $LastChangedBy: bdubbs $ $Date: 2015-02-24 00:00:51 -0500 (Tue, 24 Feb 2015) $ Cyrus SASL The Cyrus SASL package contains a Simple Authentication and Security Layer, a method for adding authentication support to connection-based protocols. To use SASL, a protocol includes a command for identifying and authenticating a user to a server and for optionally negotiating protection of subsequent protocol interactions. If its use is negotiated, a security layer is inserted between the protocol and the connection. &lfs77_checked; Package Information Download (HTTP): Download (FTP): Download MD5 sum: &cyrus-sasl-md5sum; Download size: &cyrus-sasl-size; Estimated disk space required: &cyrus-sasl-buildsize; Estimated build time: &cyrus-sasl-time; Additional Downloads Required patch: Cyrus SASL Dependencies Required Recommended Optional , , or MySQL, , , , , krb4 and Dmalloc User Notes: Install Cyrus SASL by running the following commands: patch -Np1 -i ../cyrus-sasl-&cyrus-sasl-version;-fixes-3.patch && autoreconf -fi && ./configure --prefix=/usr \ --sysconfdir=/etc \ --enable-auth-sasldb \ --with-dbpath=/var/lib/sasl/sasldb2 \ --with-saslauthd=/var/run/saslauthd && make -j1 This package does not come with a test suite. If you are planning on using the GSSAPI authentication mechanism, it is recommended to test it after installing the package using the sample server and client programs which were built in the preceding step. Instructions for performing the tests can be found at . Now, as the root user: make install && install -v -dm755 /usr/share/doc/cyrus-sasl-&cyrus-sasl-version; && install -v -m644 doc/{*.{html,txt,fig},ONEWS,TODO} \ saslauthd/LDAP_SASLAUTHD /usr/share/doc/cyrus-sasl-&cyrus-sasl-version; && install -v -dm700 /var/lib/sasl --with-dbpath=/var/lib/sasl/sasldb2: This switch forces the sasldb database to be created in /var/lib/sasl instead of /etc. --with-saslauthd=/var/run/saslauthd: This switch forces saslauthd to use the FHS compliant directory /var/run/saslauthd for variable run-time data. --enable-auth-sasldb: This switch enables SASLDB authentication backend. --with-dblib=gdbm: This switch forces GDBM to be used instead of Berkeley DB. --with-ldap: This switch enables the OpenLDAP support. --enable-ldapdb: This switch enables the LDAPDB authentication backend. There is a circular dependency with this parameter. See for a solution to this problem. --enable-java: This switch enables compiling of the Java support libraries. --enable-login: This option enables unsupported LOGIN authentication. --enable-ntlm: This option enables unsupported NTLM authentication. install -v -m644 ...: These commands install documentation which is not installed by the make install command. install -v -m700 -d /var/lib/sasl: This directory must exist when starting saslauthd or using the sasldb plugin. If you're not going to be running the daemon or using the plugins, you may omit the creation of this directory. /etc/saslauthd.conf (for saslauthd LDAP configuration) and /etc/sasl2/Appname.conf (where "Appname" is the application defined name of the application) /etc/saslauthd.conf See for information on what to include in the application configuration files. See for configuring saslauthd with OpenLDAP. See for configuring saslauthd with Kerberos. If you need to run the saslauthd daemon at system startup, install the /etc/rc.d/init.d/saslauthd init script included in the package using the following command: saslauthd make install-saslauthd You'll need to modify /etc/sysconfig/saslauthd and replace the AUTHMECH parameter with your desired authentication mechanism. Installed Programs Installed Library Installed Directories pluginviewer, saslauthd, sasldblistusers2, saslpasswd2 and testsaslauthd libsasl2.so /usr/include/sasl, /usr/lib/sasl2, /usr/share/doc/cyrus-sasl-&cyrus-sasl-version; and /var/lib/sasl Short Descriptions pluginviewer is used to list loadable SASL plugins and their properties. pluginviewer saslauthd is the SASL authentication server. saslauthd sasldblistusers2 is used to list the users in the SASL password database sasldb2. sasldblistusers2 saslpasswd2 is used to set and delete a user's SASL password and mechanism specific secrets in the SASL password database sasldb2. saslpasswd2 testsaslauthd is a test utility for the SASL authentication server. testsaslauthd libsasl2.so is a general purpose authentication library for server and client applications. libsasl2.so