--- doc/sysadmin.html.orig Wed Jul 12 21:59:51 2000 +++ doc/sysadmin.html Fri Sep 15 20:56:28 2000 @@ -171,6 +171,43 @@
pwcheck
checks passwords with the use of a seperate, helper daemon. needs to be documented.

+

mysql
A MySQL database can be used for plaintext + password checking by setting "pwcheck_method" to "mysql".

+ +

The following SASL options are used for MySQL Authentication:

+ +

+
mysql_user: <user>
+
mysql_passwd: <cleartext pw>
+
mysql_host: <host>
+
mysql_database: <database>
+
mysql_table: <table>
+
mysql_uidcol: <username col>
+
mysql_pwdcol: <password col>
+
+ +

MySQL pwcheck_method created by David Matthew Zendzian + the original patch may be found at http://www.dmzs.com/~dmz/projects/cyrus/.

+ +

ldap
A LDAP server can be used for plaintext password + checking by setting "pwcheck_method" to "ldap".

+ +

The following SASL options are used for LDAP Authentication:

+ +

+
ldap_server: <LDAP Server [localhost]> +
ldap_basedn: <LDAP base dn> +
ldap_uidattr: <LDAP uid attribute [uid]> +
ldap_port: <LDAP port [389]> +
+ +

It is a requirement that "ldap_basedn" be set to the appropriate + value for your site
+ (ex. ldap_basedn: o=surf, c=UK)

+ +

LDAP pwcheck_method created by Simon@surf.org.uk + the original patch may be found at http://www.surf.org.uk/.

+

write your own
Last, but not least, the most flexible method of authentication for PLAIN is to write your own. If you do so, any application that calls the "sasl_checkpass()"