Authen::SASL::Perl -- Perl implementation of the SASL Authentication framework |
Authen::SASL::Perl -- Perl implementation of the SASL Authentication framework
use Authen::SASL qw(Perl);
$sasl = Authen::SASL->new( mechanism => 'CRAM-MD5 PLAIN ANONYMOUS', callback => { user => $user, pass => \&fetch_password } );
Authen::SASL::Perl is the pure Perl implementation of SASL mechanisms in the Authen::SASL framework.
At the time of this writing it provides the client part implementation for the following SASL mechanisms:
Since it does no authentication it does not need to send any confidential information such as passwords in plain text over the network.
Since it is a challenge-response authentication mechanism no passwords are transferred in clear-text over the wire.
Due to the simplicity of the protocol CRAM-MD5 is susceptible to replay and dictionary attacks, so DIGEST-MD5 should be used in preferrence.
Like CRAM-MD5 it is a challenge-response authentication method that does not send plain text passwords over the network.
Compared to CRAM-MD5, DIGEST-MD5 prevents chosen plaintext attacks, and permits the use of third party authentication servers, so that it is recommended to use DIGEST-MD5 instead of CRAM-MD5 when possible.
It does does not provide a security layer and sends the credentials in clear over the wire. Thus this mechanism should not be used without adequate security protection.
Like LOGIN it sends the credentials in clear over the network and should not be used without sufficient security protection.
the Authen::SASL manpage, the Authen::SASL::Cyrus::ANONYMOUS manpage, the Authen::SASL::Cyrus::CRAM_MD5 manpage, the Authen::SASL::Cyrus::DIGEST_MD5 manpage, the Authen::SASL::Cyrus::EXTERNAL manpage, the Authen::SASL::Cyrus::LOGIN manpage, the Authen::SASL::Cyrus::PLAIN manpage
Peter Marschall <peter@adpm.de>
Please report any bugs, or post any suggestions, to the perl-ldap mailing list <perl-ldap@perl.org>
Copyright (c) 2004 Peter Marschall. All rights reserved. This document is distributed, and may be redistributed, under the same terms as Perl itself.
Authen::SASL::Perl -- Perl implementation of the SASL Authentication framework |