Cyrus SASL library, version 2

SASL (Simple Authentication Security Layer) is an Internet standards-track method for remote computers to authenticate. The Cyrus SASL library makes supporting various SASL mechanisms easy for both client and server writers.

The Cyrus project is the implementation of an enterprise mail system by the Carnegie Mellon University Computing Services Department. We are interested in scalable, easy to administer systems.

The Cyrus SASL library distribution

Cyrus SASL library distribution

Documentation

• Read Me First
• Installation Documentation
• Information for upgrading from SASLv1
• SASLv1 to SASLv2 Application Conversion Guide

• A high-level overview of Cyrus SASL Components
• The Cyrus SASL for System Administrators
• Options for use with Cyrus SASL
• The SASL Application Programmer's Guide
• The SASL Plugin Programmer's Guide
• Advanced SASL usage

• Mac OS X Build Guide
• OS/390 Build Guide
• Win32 Build Guide

• Post Office Protocol - Version 3 (POP3): APOP Command
• Kerberos Version 4 SASL Mechanism
• The One-Time-Password SASL Mechanism
• The SecurID(r) SASL Mechanism
• Using Digest Authentication as a SASL Mechanism (Historic)
• Simple Authentication and Security Layer (SASL)
• Anonymous Simple Authentication and Security Layer (SASL) Mechanism
• The PLAIN Simple Authentication and Security Layer (SASL) Mechanism
• Base64 Data Encoding
• The Kerberos V5 ("GSSAPI") Simple Authentication and Security Layer (SASL) Mechanism
• Using Generic Security Service Application Program Interface (GSS-API) Mechanisms in SASL: The GS2 Mechanism Family
• Salted Challenge Response Authentication Mechanism (SCRAM) SASL and GSS-API Mechanisms
• Lightweight Directory Access Protocol (LDAP) Schema for Storing Salted: Challenge Response Authentication Mechanism (SCRAM) Secrets
• Channel Bindings for TLS
• Preparation, Enforcement, and Comparison of Internationalized Strings Representing Usernames and Passwords
• SCRAM-SHA-256 and SCRAM-SHA-256-PLUS: Simple Authentication and Security Layer SASL) Mechanisms
• Salted Challenge Response HTTP Authentication Mechanism
• Secure Remote Password Authentication Mechanism
• The LOGIN SASL Mechanism
• The CRAM-MD5 SASL Mechanism
• Simple Authentication and Security Layer C API
• DSS Secured Password Authentication Mechanism

• Using SASL: Pluggable Security
• Using SASL: CMU's Cyrus SASL Library
• Information on SASL mechanisms, profiles, servers and clients implementing SASL
• FAQ from Sendmail
• The Secure Remote Password Protocol paper by Thomas Wu
• TCL extensions for SASL
• The NTLM Authentication Protocol (NTLM)
• Common Internet File System (CIFS) Technical Reference (SMB/NTLM)

Go to the Project Cyrus Home Page
Go to the Andrew Systems Group homepage