I'm pretty new to SASL, so this business of old and new secrets is a bit foreign to me. Given that this is a fresh setup, is there a way for me to force the server to assume that all old secrets have been upgraded to the new? Is this what the "sasl_auto_transition" option is for?
Not currently. It might make sense to add an option to SASL which disables lookup of old secrets. Before I started looking into this however, I'd really like to know what, if any, the performance hit making two auxprop queries really is.
-- Kenneth Murchison Oceana Matrix Ltd. Software Engineer 21 Princeton Place 716-662-8973 x26 Orchard Park, NY 14127 --PGP Public Key-- http://www.oceana.com/~ken/ksm.pgp --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html