Red Hat 8.1 Configuration And Command Reference page 184

184
Chapter 6. Command-Line Utilities
T able 6.8. Description of DIGEST -MD5 SASL Mechanism Options
Required Option
or
Optional
Required mech=DIGEST -MD5 Gives the SASL mechanism.
Required authid=authid_value Gives the ID used to authenticate to the server.
Optional secprop=value
Description
authid_value can be the following:
UID. For example, m sm ith.
u: uid. For example, u: m sm ith.
dn: dn_value. For example, dn:
uid=m sm ith,ou=People,o=exam ple.com .
T he secprop attribute sets the security properties
for the connection. T he secprop value can be any
of the following:
None
noplain — Do not permit mechanisms
susceptible to simple passive attack.
noanonymous — Do not permit mechanisms
that allow anonymous access.
minssf — Require a minimum security strength;
this option needs a numeric value specifying
bits of encryption. A value of - 1 means
integrity is provided without privacy.
maxssf — Require a maximum security
strength; this option needs a numeric value
specifying bits of encryption. A value of - 1
means integrity is provided without privacy. T he
maximum value is 128.
Example
-o "mech=DIGEST -MD5"
-o
"authid=dn:uid=msmith,ou=People,o=example.com"
-o "secprop=noplain,noanonymous,
maxssf=128,minssf=128"