HP-UX Directory Server 8.1 configuration, command, and file reference

Table 6-8 Description of DIGEST-MD5 SASL mechanism options
ExampleDescriptionOptionRequired
or
optional
-o “mech=DIGEST-MD5”Gives the SASL
mechanism.
mech=DIGEST-MD5Required
-o
“authid=dn:uid=msmith,ou=People,o=example.com"
Gives the ID used to
authenticate to the server.
authid_value can be
the following:
• UID. For example,
msmith.
• u: uid. For
example, u: msmith.
• dn: dn_value. For
example, see the next
column.
authid=authid_value
Required
-o “secprop=noplain,noanonymous,
maxssf=128,minssf=128”
The secprop attribute
sets the security
properties for the
connection. The secprop
value can be any of the
following:
• None
• noplain
Do not permit
mechanisms
susceptible to simple
passive attack.
• noanonymous
Do not permit
mechanisms that
allow anonymous
access.
• minssf
Require a minimum
security strength; this
option needs a
numeric value
specifying bits of
encryption. A value of
-1 means integrity is
provided without
privacy.
• maxssf
Require a maximum
security strength; this
option needs a
numeric value
specifying bits of
encryption. A value of
-1 means integrity is
provided without
privacy. The
maximum value is
128.
secprop=value
Optional
198 Command-line utilities