ldapv3.pdf 7947KB Apr 17 2013 11:30:42 AM - mirror omadata

PLAIN Authentication
PLAIN SASL authentication is used when the SASL application/service
will receive a user id, authentication id, and password triple all in clear
text.
Because PLAIN transmits the secret (password) over the network
security depends upon encryption as some lower level, such as session
encryption via TLS.
Cyrus SASL can verify PLAIN passwords via several methods.
auxprop – Uses a plugin architecture, the most common plugin is
sasldb, which authenticates against a SASL secrets file.
saslauthd – Uses a socket to communicate with a daemon that
verifies authentication requests.
For more information on saslauthd see the Cyrus saslauthd section
of this document.
pwcheck – A depricated method that uses an external daemon.