Penguin

Differences between version 3 and previous revision of SASLNotes.

Other diffs: Previous Major Revision, Previous Author, or view the Annotated Edit History

Newer page: version 3 Last edited on Thursday, May 15, 2003 8:36:15 pm by PerryLorier Revert
Older page: version 2 Last edited on Thursday, May 15, 2003 8:25:05 pm by PerryLorier Revert
@@ -43,8 +43,11 @@
  by anonymous read 
  by * read 
 in your slapd.conf, preferably before any other access directive. For more information about ldap access directives see [LDAPNotes]. 
  
+----  
+  
+[SASL] stores passwords in /etc/sasldb and/or /etc/sasldb2 by default. Why it doesn't it do it somewhere in /var like it should is anyone's guess. However this means that /etc will have to be writable. Passwords are stored in these files __in plain text__, so make sure your permissions on them are correct. You can disable this by providing the -n parameter to saslpasswd2. You have been warned.  
  
 ---- 
  
 [SASL] has the concepts of realms. A "realm" is authentication mechanism dependant, but the general idea is that it works like a kerberos realm. By default you'll be using the realm which is the same as your hostname. If you're authenticating against a different host, make sure your realm is right or it isn't going to work.