[Cyrus-SASL] Section

In the [Cyrus-SASL] section, parameters which configure operation of cyrus-sasl SASL driver are specified:

Lib = {path to file}

Absolute path to the cyrus-sasl2 library.

Default value:

Lib = /usr/lib/libsasl2.so.2

Path = {string}

Name of the configuration file (.conf extension is added automatically).

The cyrus-sasl2 library receives its settings from this file.

Note that Dr.Web MailD does not check whether the file, specified in the parameter, exists and is correct. If the file is missing or is incorrect, the cyrus-sasl2 library automatically uses its default settings and no notification is generated on that.

Default value:

Path = maild

ServerHostname = {string}

Host name.

FQDN that is automatically added as @domain to the user part transmitted by a client (if only the user part - UID - is transmitted). The result string is used as a login that saslauthd searches for authorization.

If the value is not set, the Hostname parameter value from the [General] section is used instead. If Hostname value is also not specified, value returned by gethostname function is used.

Default value:

ServerHostname =

ServerRealm = {string}

SASL realm the server belongs to.

FQDN that is automatically added as @domain to the user part of address transmitted by a client. The result string user@domain is used as a login that saslauthd searches for authorization.

If the value is not set and the client did not transmit Realm/Domain value when authenticating, FQDN is taken from the ServerHostname parameter.

Note that you need to specify -r option for the saslauthd daemon to enable correct processing of the user@domain string while authentication.

Default value:

ServerRealm =

SecurityOptions = {string}

List of security settings, separated by commas.

The following security settings are allowed:

noplaintext – disable authentication mechanisms susceptible to attacks (for example, PLAIN, LOGIN);

noactive – protection from active (non-dictionary) attacks during authentication exchange;

nodictionary – disable authentication mechanisms susceptible to passive dictionary attacks;

noanonymous – disable authentication mechanisms that allow anonymous login;

mutual_auth – require mutual authentication.

Default value:

SecurityOptions = noanonymous