Cyrus SASL
The Cyrus SASL library is a generic library for easy integration of secure network authentication to any client or server application. It supports authentication via standard plaintext methods as well as CRAM-MD5 and DIGEST-MD5 shared secret methods and KERBEROS_V4 and GSSAPI Kerberos methods. The SASL protocol framework is used by SMTP, IMAP, ACAP, LDAP, and other standard protocols.
| Tags | Security Software Development Libraries |
|---|---|
| Licenses | BSD Original |
Recent releases
- 22 Nov 2004 16:24
Changes: The most important fix is to avoid an attack using the SASL_PATH environment variable when sasl is used in a setuid environment (this is infrequent but possible). The CRAM MD5 plugin has a bugfix for an uninitialized variable reference. Also included are NTLM portability fixes.
- 14 Jul 2004 13:57
Changes: This release contains a large number of bugfixes and cleanups from the last version, including the "-r" option for saslauthd to instruct it to reassemble realm and username into a username of "user@realm" form. There is now also support for passing of GSSAPI credentials, and support for SQLite in the SQL auxprop plugin.
- 11 Mar 2004 08:24
Changes: This release contains a large number of bugfixes and cleanups from the last version, including fixes for a Solaris 9 IPv6 issue, a problem with a number of missing files in the distribution, the removal of the "experimental" tag from the saslauthd LDAP module, and support for LDAP group filters within saslauthd.
- 01 Dec 2003 10:09
Changes: This release contains minor bugfixes from the previous release. It also contains enhanced Win32 support and better GSSAPI autoconf code.
- 15 Oct 2003 12:37
Changes: This release contains significant changes in a variety of areas, including PostgreSQL support for the SQL auxilliary property plugin, Win32 support, writable auxiliary property support, and the use of newer versions of the GNU autotools.
