saslpluginviewer (8)

Leading comments

pluginviewer.8 -- pluginviewer man page
Alexey Melnikov

Copyright (c) 2006 Carnegie Mellon University.  All rights reserved.

Redistribution and use in source and binary forms, with or without
modification, are permitted provided that the following conditions
are met:

1. Redistributions of source code must retain the above copyright
   notice, this list of conditions and the following disclaimer.

2. Redistributions in binary form must reproduce the above copyright
   notice, this list of c...

(The comments found at the beginning of the groff file "man8/saslpluginviewer.8".)

NAME

pluginviewer - list loadable SASL plugins and their properties

SYNOPSIS

pluginviewer [-a] [-s] [-c] [-b min=N,max=N] [-e ssf=N,id=ID] [-m MECHS] [-x AUXPROP_MECH] [-f FLAGS] [-p PATH]

DESCRIPTION

pluginviewer can be used by a server administrator to troubleshoot SASL installations. The utility can list loadable (properly configured) client and server side plugins, as well as auxprop plugins.

OPTIONS

-a

List auxprop plugins.

-s

List server authentication (SASL) plugins.

-c

List client authentication (SASL) plugins.

-b min=N1,max=N2

List client authentication (SASL) plugins. Strength of the SASL security layer in bits. min=N1 specifies the minumum strength to use (1 => integrity protection). max=N2 specifies the maximum strength to use. Only SASL mechanisms which support security layer with strength M such that N1 <= M <= N2 will be shown.

-e ssf=N,id=ID

Assume that an external security layer (e.g. TLS) with N-bit strength is installed. The ID is the authentication identity used by the external security layer.

-m MECHS

Limit listed SASL plugins to the ones included in the MECHS (space separated) list.

-x AUXPROP_MECHS

Limit listed auxprop plugins to the one listed in the AUXPROP_MECHS (space separated) list.

-f FLAGS

Set security flags. FLAGS is a comma separated list of one or more of the following security flags: noplain (SASL mechanism doesn't send password in the clear during authentication), noactive (require protection from active attacks), nodict (require mechanisms which are secure against passive dictionary attacks), forwardsec (require forward secrecy), passcred (require mechanisms that can delegate client credentials), maximum (require all security flags).

-p PATH

Specifies a colon-separated search path for plugins.

SEE ALSO

rfc4422 - Simple Authentication and Security Layer (SASL)