source: postlfs/security/cyrus-sasl.xml@ 939cf0da

10.0 10.1 11.0 6.0 6.1 6.2 6.2.0 6.2.0-rc1 6.2.0-rc2 6.3 6.3-rc1 6.3-rc2 6.3-rc3 7.10 7.4 7.5 7.6 7.6-blfs 7.6-systemd 7.7 7.8 7.9 8.0 8.1 8.2 8.3 8.4 9.0 9.1 basic bdubbs/svn elogind gnome kde5-13430 kde5-14269 kde5-14686 ken/refactor-virt krejzi/svn lazarus nosym perl-modules qt5new systemd-11177 systemd-13485 trunk xry111/git-date xry111/git-date-for-trunk xry111/git-date-test
Last change on this file since 939cf0da was 939cf0da, checked in by Randy McMurchy <randy@…>, 17 years ago

Moved OpenSSL from Chapter 8 to Chapter 4

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@3268 af4574ff-66df-0310-9fd7-8a98e5e911e0

  • Property mode set to 100644
File size: 6.7 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.3//EN"
3 "http://www.oasis-open.org/docbook/xml/4.3/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7 <!ENTITY cyrus-sasl-download-http "http://ftp.andrew.cmu.edu/pub/cyrus-mail/cyrus-sasl-&cyrus-sasl-version;.tar.gz ">
8 <!ENTITY cyrus-sasl-download-ftp "ftp://ftp.andrew.cmu.edu/pub/cyrus-mail/cyrus-sasl-&cyrus-sasl-version;.tar.gz">
9 <!ENTITY cyrus-sasl-size "1.8 MB">
10 <!ENTITY cyrus-sasl-buildsize "17.3 MB">
11 <!ENTITY cyrus-sasl-time "0.28 SBU">
12]>
13
14<sect1 id="cyrus-sasl" xreflabel="Cyrus SASL-&cyrus-sasl-version;">
15<sect1info>
16<othername>$LastChangedBy$</othername>
17<date>$Date$</date>
18</sect1info>
19<?dbhtml filename="cyrus-sasl.html"?>
20<title>Cyrus <acronym>SASL</acronym>-&cyrus-sasl-version;</title>
21
22<sect2>
23<title>Introduction to <application>Cyrus <acronym>SASL</acronym></application>
24</title>
25
26<para>The <application>Cyrus <acronym>SASL</acronym></application> package
27contains a Simple Authentication and Security Layer, a method for adding
28authentication support to connection-based protocols. To use
29<acronym>SASL</acronym>, a protocol includes a command for identifying and
30authenticating a user to a server and for optionally negotiating protection of
31subsequent protocol interactions. If its use is negotiated, a security layer
32is inserted between the protocol and the connection.</para>
33
34<sect3><title>Package information</title>
35<itemizedlist spacing="compact">
36<listitem><para>Download (HTTP): <ulink url="&cyrus-sasl-download-http;"/></para></listitem>
37<listitem><para>Download (FTP): <ulink url="&cyrus-sasl-download-ftp;"/></para></listitem>
38<listitem><para>Download size: &cyrus-sasl-size;</para></listitem>
39<listitem><para>Estimated disk space required: &cyrus-sasl-buildsize;</para></listitem>
40<listitem><para>Estimated build time: &cyrus-sasl-time;</para></listitem>
41</itemizedlist>
42</sect3>
43
44<sect3><title><application>Cyrus <acronym>SASL</acronym></application>
45dependencies</title>
46
47<sect4><title>Required</title>
48<para><xref linkend="openssl-package"/></para>
49</sect4>
50
51<sect4><title>Optional</title>
52<para><xref linkend="Linux_PAM"/>,
53<xref linkend="openldap"/>,
54<xref linkend="heimdal"/> or <xref linkend="mitkrb"/>,
55<xref linkend="j2sdk"/>,
56<xref linkend="mysql"/>,
57<xref linkend="postgresql"/>,
58<xref linkend="db"/>,
59<xref linkend="gdbm"/>,
60<xref linkend="courier"/>,
61<ulink url="http://www.pdc.kth.se/kth-krb/">krb4</ulink>,
62<ulink url="http://sqlite.org/">SQLite</ulink> and
63<ulink url="http://dmalloc.com/">Dmalloc</ulink></para>
64</sect4>
65</sect3>
66
67</sect2>
68
69<sect2>
70<title>Installation of <application>Cyrus <acronym>SASL</acronym></application>
71</title>
72
73<para>Install <application>Cyrus <acronym>SASL</acronym></application> by
74running the following commands:</para>
75
76<screen><userinput><command>./configure --prefix=/usr --sysconfdir=/etc \
77 --with-dbpath=/var/lib/sasl/sasldb2 \
78 --with-saslauthd=/var/run &amp;&amp;
79make &amp;&amp;
80make install &amp;&amp;
81install -m644 saslauthd/saslauthd.mdoc \
82 /usr/share/man/man8/saslauthd.8 &amp;&amp;
83install -d -m755 /usr/share/doc/sasl &amp;&amp;
84install -m644 doc/{*.{html,txt,fig},ONEWS,TODO} \
85 saslauthd/LDAP_SASLAUTHD /usr/share/doc/sasl &amp;&amp;
86install -d -m700 /var/lib/sasl</command></userinput></screen>
87
88</sect2>
89
90<sect2>
91<title>Command explanations</title>
92
93<para><parameter>--with-dbpath=/var/lib/sasl/sasldb2</parameter>: This
94parameter forces the <command>saslauthd</command> database to be created
95in <filename class='directory'>/var/lib/sasl</filename> instead of
96<filename class='directory'>/etc</filename>.</para>
97
98<para><parameter>--with-saslauthd=/var/run</parameter>: This parameter forces
99<command>saslauthd</command> to use the <acronym>FHS</acronym> compliant
100directory <filename class='directory'>/var/run</filename> for variable run-time
101data.</para>
102
103<para><command>install -m644 ...</command>: These commands
104install documentation which is not installed by the
105<command>make install</command> command.</para>
106
107<para><command>install -d -m700 /var/lib/sasl</command>: This directory must
108exist when starting <command>saslauthd</command>. If you're not going to be
109running the daemon, you may omit the creation of this directory.
110</para>
111
112</sect2>
113
114<sect2>
115<title>Configuring <application>Cyrus
116<acronym>SASL</acronym></application></title>
117
118<sect3><title>Config Files</title>
119<para><filename>/etc/saslauthd.conf</filename> (for <acronym>LDAP</acronym>
120configuration) and <filename>/usr/lib/sasl2/Appname.conf</filename> (where
121"Appname" is the application defined name of the application)</para>
122</sect3>
123
124<sect3><title>Configuration Information</title>
125<para>See <ulink url="file:///usr/share/doc/sasl/sysadmin.html"/> for
126information on what to include in the application configuration files. See
127<ulink url="file:///usr/share/doc/sasl/LDAP_SASLAUTHD"/> for configuring
128<command>saslauthd</command> with <acronym>LDAP</acronym>.</para>
129</sect3>
130
131<sect3><title>Init Script</title>
132<para>If you need to run the <command>saslauthd</command> daemon at system
133startup, install the <filename>/etc/rc.d/init.d/cyrus-sasl</filename>
134init script included in the
135<xref linkend="intro-important-bootscripts"/> package.</para>
136
137<screen><userinput><command>make install-cyrus-sasl</command></userinput></screen>
138
139<note><para>You'll need to modify the init script and replace the
140<parameter><replaceable>[authmech]</replaceable></parameter> parameter to the
141<parameter>-a</parameter> switch with your desired authentication mechanism.
142</para></note>
143</sect3>
144
145</sect2>
146
147<sect2>
148<title>Contents</title>
149
150<para>The <application>Cyrus <acronym>SASL</acronym></application> package
151contains <command>saslauthd</command>, <command>sasldblistusers2</command>,
152<command>saslpasswd2</command>, <application>Cyrus
153<acronym>SASL</acronym></application> plugins, the
154<filename class='libraryfile'>libsasl2</filename> library and optionally the
155<filename class='libraryfile'>libjavasasl</filename> library and
156<acronym>SASL</acronym> Java classes.</para>
157
158</sect2>
159
160<sect2><title>Description</title>
161
162<sect3><title>saslauthd</title>
163<para><command>saslauthd</command> is the <acronym>SASL</acronym>
164authentication server.</para></sect3>
165
166<sect3><title>sasldblistusers2</title>
167<para><filename>sasldblistusers2</filename> is used to list the users in the
168<acronym>SASL</acronym> password database.</para></sect3>
169
170<sect3><title>saslpasswd2</title>
171<para><filename>saslpasswd2</filename> is used to set and delete a user's
172<acronym>SASL</acronym> password and mechanism specific secrets in the
173<acronym>SASL</acronym> password database.</para></sect3>
174
175</sect2>
176
177</sect1>
178
Note: See TracBrowser for help on using the repository browser.