[KLUG Members] Cyrus IMAP and SASL hell

Adam Williams members@kalamazoolinux.org
08 Oct 2002 14:45:16 -0400


>Okay, so exactly HOW does SASL work? 

Thats complicated.

>Or not, as the case may be?

That may even be more complicated.

SASL is an API and model for network authentication.  SASL itself is
nothing more.  There are various modules (similair but not equivalent to
PAM modules) for various types of authentication (Kerberos, CRAM,
AUXPROP, etc...).

What module are you trying to use?  What do you want to authenticate
against?

Remember that SASL (unlike PAM/NSS) has no inherent relationship with
the OS.  i.e. a SASL user george has no relationship to PAM/NSS user
george unless one is explicitly established.