The Cyrus SASL library is a generic library for easy integration of secure network authentication to any client or server application. It supports authentication via standard plaintext methods as well as CRAM-MD5 and DIGEST-MD5 shared secret methods and KERBEROS_V4 and GSSAPI Kerberos methods. The SASL protocol framework is used by SMTP, IMAP, ACAP, LDAP, and other standard protocols.
|Tags||Security Software Development Libraries|
Release Notes: This release adds assorted bugfixes.
Release Notes: The most important fix is to avoid an attack using the SASL_PATH environment variable when sasl is used in a setuid environment (this is infrequent but possible). The CRAM MD5 plugin has a bugfix for an uninitialized variable reference. Also included are NTLM portability fixes.
Release Notes: This release contains a large number of bugfixes and cleanups from the last version, including the "-r" option for saslauthd to instruct it to reassemble realm and username into a username of "user@realm" form. There is now also support for passing of GSSAPI credentials, and support for SQLite in the SQL auxprop plugin.
Release Notes: This release contains a large number of bugfixes and cleanups from the last version, including fixes for a Solaris 9 IPv6 issue, a problem with a number of missing files in the distribution, the removal of the "experimental" tag from the saslauthd LDAP module, and support for LDAP group filters within saslauthd.
Release Notes: This release contains minor bugfixes from the previous release. It also contains enhanced Win32 support and better GSSAPI autoconf code.