Re: To the one who posted Cyrus SASL diagram...

2003-10-30 Thread Ken Murchison
Cyrus Daboo wrote: Hi Etienne, --On Thursday, October 30, 2003 9:07 -0500 Etienne Goyer <[EMAIL PROTECTED]> wrote: | It might be interesting to add that only certain mechanism provide | so-called "proxy" authentication (authcid/authzid separation; how would | this feature be called ?). PLAIN a

Re: To the one who posted Cyrus SASL diagram...

2003-10-30 Thread Cyrus Daboo
Hi Etienne, --On Thursday, October 30, 2003 9:07 -0500 Etienne Goyer <[EMAIL PROTECTED]> wrote: | It might be interesting to add that only certain mechanism provide | so-called "proxy" authentication (authcid/authzid separation; how would | this feature be called ?). PLAIN and DIGEST-MD5 are th

Re: To the one who posted Cyrus SASL diagram...

2003-10-30 Thread Etienne Goyer
It might be interesting to add that only certain mechanism provide so-called "proxy" authentication (authcid/authzid separation; how would this feature be called ?). PLAIN and DIGEST-MD5 are the one I know for sure provide it, while CRAM-MD5 don't. I am not sure about GSSAPI, EXTERNAL and other.

Re: To the one who posted Cyrus SASL diagram...

2003-10-30 Thread Rob Siemborski
On Thu, 30 Oct 2003, Nikola Milutinovic wrote: > SASL provides an interface for applications - servers and clients - to perform > authentication, using more or less secure mechanisms. Among some popular servers > that you neglected to mention is Sendmail (a veteran in that field). You may want to

To the one who posted Cyrus SASL diagram...

2003-10-30 Thread Nikola Milutinovic
Sorry, I deleted the mail, so I don't have your e-mail now and this might be educational to the list. This is what I've learned about SASL so far. SASL provides an interface for applications - servers and clients - to perform authentication, using more or less secure mechanisms. Among some popu