On Wed, 10 Apr 2002, Igor Brezac wrote:

> True.  However, in most cases userPassword in LDAP is of
> {(crypt|sha|md5)}xxxxxx format.  It appears that cmusaslsecretPLAIN takes
> md5 password only.

Yes.  It is.

> As you suggested below, a possibly better approach would be to develop a
> saslauthd mechanism.  I assume that SASL v1 (1.5.27) can talk to saslauthd
> from SASL v2?  This can solve a lot of issues where different apps need to
> use different sasl versions.

No, (saslauthd was only considered experimental in SASLv1), and the
protocol between the two versions is slightly different.  The differences
allow the SASLv2 saslauthd to differentiate between service types.

-Rob

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Rob Siemborski * Andrew Systems Group * Cyert Hall 235 * 412-268-7456
Research Systems Programmer * /usr/contributed Gatekeeper


Reply via email to