Red Hat DIRECTORY SERVER 8.1 Command Reference Manual page 262

Chapter 6. Command-Line Utilities
Required or Optional
Table 6.7. Description of CRAM-MD5 Mechanism Options
Required or Optional
Required
Required
Optional
248
Option
Option
mech=DIGEST-MD5
authid=authid_value
secprop=value
Description
using integrity or
privacy settings.
Description
Gives the SASL
mechanism.
Gives the ID used to
authenticate to the
server. authid_value
can be the following:
• UID. For example,
msmith.
• u: uid. For example,
u: msmith.
• dn: dn_value. For
example, dn:
uid=msmith,ou=People,o=example.com.
The secprop attribute
sets the security
properties for the
connection. The
secprop value can be
any of the following:
• None
• noplain — Do not
permit mechanisms
susceptible to simple
passive attack.
• noanonymous
— Do not permit
mechanisms that
allow anonymous
access.
• minssf — Require
a minimum security
strength; this option
needs a numeric
value specifying
bits of encryption. A
value of - 1 means
integrity is provided
without privacy.
Example
Example
-o "mech=DIGEST-
MD5"
-o
"authid=dn:uid=msmith,ou=People,o=exampl
-o
"secprop=noplain,noanonymous,
maxssf=128,minssf=128"