PNG
IHDR ; IDATxܻn0K
)(pA 7LeG{ §㻢| ذaÆ
6lذaÆ
6lذaÆ
6lom$^yذag5 bÆ
6lذaÆ
6lذa{
6lذaÆ
` }HFkm,mӪôô! x|'ܢ˟;E:9&ᶒ}{v]n&6
h_tڠ͵-ҫZ;Z$.Pkž)!o>}leQfJTu іچ\X=8Rن4`Vwl>nG^is"ms$ui?wbs[m6K4O .4%/ bC%t Mז -lG6mrz2s%9s@-k9=)kB5\+͂Zsٲ Rn~GRC wIcIn7jJhۛNCS|j08yiHKֶۛkɈ+;Sz L /F *\Ԕ#"5m2[S =gnaPeғL
lذaÆ
6l^ḵaÆ
6lذaÆ
6lذa;
_ذaÆ
6lذaÆ
6lذaÆ
R IENDB`
SASL Mechanism Properties/Features
SASL Mechanism Properties/Features
This table shows what security flags and features are supported by each
of the mechanisms provided by the Cyrus SASL Library.
|
MAX
SSF |
SECURITY PROPERTIES |
FEATURES |
| NOPLAIN |
NOACTIVE |
NODICT |
FORWARD |
NOANON |
CRED |
MUTUAL |
CLT FIRST |
SRV FIRST |
SRV LAST |
PROXY |
| ANONYMOUS |
0 |
X |
|
|
|
|
|
|
X |
|
|
|
| CRAM-MD5 |
0 |
X |
|
|
|
X |
|
|
|
X |
|
|
| DIGEST-MD5 |
128 |
X |
|
|
|
X |
|
X |
reauth |
initial auth |
X |
X |
| EXTERNAL |
0 |
X |
|
X |
|
X |
|
|
X |
|
|
X |
| GSSAPI |
56 |
X |
X |
|
|
X |
|
X |
X |
|
|
X |
| KERBEROS_V4 |
56 |
X |
X |
|
|
X |
|
X |
|
X |
|
X |
| LOGIN |
0 |
|
|
|
|
X |
X |
|
|
X |
|
|
| NTLM |
0 |
X |
|
|
|
X |
|
|
X |
|
|
|
| OTP |
0 |
X |
|
|
X |
X |
|
|
X |
|
|
X |
| PASSDSS-3DES-1 |
112 |
X |
X |
X |
X |
X |
X |
X |
X |
|
|
X |
| PLAIN |
0 |
|
|
|
|
X |
X |
|
X |
|
|
X |
| SRP |
128 |
X |
X |
X |
X |
X |
|
X |
X |
|
X |
X |
Understanding this table:
- MAX SSF - The maximum Security Strength Factor supported
by the mechanism (roughly the number of bits of encryption provided, but may
have other meanings, for example an SSF of 1 indicates integrity protection
only, no encryption).
- NOPLAIN - Mechanism is not susceptable to simple passive
(eavesdropping) attack.
- NOACTIVE - Protection from active (non-dictionary) attacks
during authentication exchange. (Implies MUTUAL).
- NODICT - Not susceptable to passive dictionary attack.
- FORWARD - Breaking one session won't help break the next.
- NOANON - Don't permit anonymous logins.
- CRED - Mechanism can pass client credentials.
- MUTUAL - Supports mutual authentication (authenticates the server
to the client)
- CLTFIRST - The client should send first in this mechanism.
- SRVFIRST - The server must send first in this mechanism.
- SRVLAST - This mechanism supports server-send-last configurations.
- PROXY - This mechanism supports proxy authentication.