focal (8) saslpluginviewer.8.gz

NAME

       pluginviewer - list loadable SASL plugins and their properties

SYNOPSIS

       pluginviewer  [-a]  [-s]  [-c]  [-b min=N,max=N] [-e ssf=N,id=ID] [-m MECHS] [-x AUXPROP_MECH] [-f FLAGS]
       [-p PATH]

DESCRIPTION

       pluginviewer can be used by a server administrator to troubleshoot SASL installations.  The  utility  can
       list loadable (properly configured) client and server side plugins, as well as auxprop plugins.

OPTIONS

       -a     List auxprop plugins.

       -s     List server authentication (SASL) plugins.

       -c     List client authentication (SASL) plugins.

       -b min=N1,max=N2
              List  client  authentication  (SASL) plugins.  Strength of the SASL security layer in bits. min=N1
              specifies the minumum strength to use (1 => integrity protection). max=N2  specifies  the  maximum
              strength  to  use.  Only SASL mechanisms which support security layer with strength M such that N1
              <= M <= N2 will be shown.

       -e ssf=N,id=ID
              Assume that an external security layer (e.g. TLS) with N-bit strength is installed.  The ID is the
              authentication identity used by the external security layer.

       -m MECHS
              Limit listed SASL plugins to the ones included in the MECHS (space separated) list.

       -x AUXPROP_MECHS
              Limit listed auxprop plugins to the one listed in the AUXPROP_MECHS (space separated) list.

       -f FLAGS
              Set  security  flags.  FLAGS  is  a  comma separated list of one or more of the following security
              flags: noplain (SASL mechanism doesn´t send password in the clear during authentication), noactive
              (require  protection  from  active  attacks),  nodict (require mechanisms which are secure against
              passive dictionary attacks), forwardsec (require forward secrecy),  passcred  (require  mechanisms
              that can delegate client credentials), maximum (require all security flags).

       -p PATH
              Specifies a colon-separated search path for plugins.

SEE ALSO

       rfc4422 - Simple Authentication and Security Layer (SASL)