sasl-sample-client8

Sample client program for demonstrating and testing sasl authentication.

Usage

sasl-sample-client [-b min=N,max=N] [-e ssf=N,id=ID] [-m MECH] [-f FLAGS] [-i local=IP,remote=IP] [-p PATH] [-s NAME] [-n FQDN] [-u ID] [-a ID]

Overview

This manual page documents briefly the sasl-sample-client command.

This manual page was written for the Debian distribution because the original program does not have a manual page.

sasl-sample-client is a program to demonstrate and test SASL authentication. It implements the client part, and the server part is available as sasl-sample-server.

Options

A summary of options is included below.

-b

Number of bits to use for encryption.

min=N: minimum number of bits to use (1 => integrity)

max=N: maximum number of bits to use

-e

Assume external encryption.

ssf=N: external mech provides N bits of encryption

id=ID: external mech provides authentication id ID

-m: Force use of MECH for security.

-f

Set security flags.

noplain: require security vs. passive attacks

noactive: require security vs. active attacks

nodict: require security vs. passive dictionary attacks

forwardsec: require forward secrecy

maximum: require all security flags

passcred: attempt to pass client credentials

-i

Set IP addresses (required by some mechs).

local=IP;PORT: set local address to IP, port PORT

remote=IP;PORT: set remote address to IP, port PORT

-p: Colon-separated search path for mechanisms.

-r: Realm to use.

-s: Service name passed to mechanisms.

-n: Server fully-qualified domain name.

-u: User (authorization) id to request.

-a: Id to authenticate as.

-d: Disable client-send-first.

-l: Enable server-send-last.

Releases

9 releases since Debian 5.0 (Lenny); the text changed 5 times.