[...]
Solaris doors are really the ideal form of IPC for saslauthd. They have the problem that code has to be thread-safe and thus it isn't for everybody, but for high performance sites it really is a good deal.If you are on Solaris, I highly recommend the doors IPC method over the UNIX socket method, since we began to see very bizarre problems under load.You might run into problems if you use ldap api and doors, ldap module may not be thread safe. In addition, thread safe ldap libs need to be used when saslauthd-doors is built.I'd like to enhance saslauthd to use loopback interface at some point, this will solve the problem with unix sockets and you do not need to worry about thread safety.
Using the loopback interface will probably cause more people to raise security flags (as it is, people seem to worry about saslauthd and Unix sockets, which have much more obvious access control).
Larry
