Options for Cyrus SASL

This document contains information on what options are used by the Cyrus SASL library and bundled mechanisms:

OptionUsed ByDescriptionDefault
auto_transitionSASL Library When set to 'yes' and when using the sasldb auxprop plugin, automatically transition users to other mechs when they do a successful plaintext authenticationno
canon_user_pluginSASL Library Name of canon_user plugin to useINTERNAL
keytabGSSAPI Location of keytab file/etc/krb5.keytab (system dependant)
mech_listSASL Library Whitespace separated list of mechanisms to allow (e.g. 'plain otp'). Used to restrict the mechanisms to a subset of the installed plugins.all available
opiekeysOTP Location of the opiekeys file/etc/opiekeys
plugin_listSASL Library Location of Plugin list (Unsupported)none
pwcheck_methodSASL Library Mechanism used to verify passwords, used by sasl_checkpass (possible values: 'auxprop', 'pwcheck', 'saslauthd', 'alwaystrue')auxprop
saslauthd_pathSASL Library Path to saslauthd binarysystem dependant
sasldb_pathsasldb plugin Path to sasldb file/etc/sasldb2 (system dependant)
srvtabKERBEROS_V4 Location of the srvtab file/etc/srvtab (system dependant)

Back to the index