HP UX Identity Security Software manual 198

Table 6-8 Description of DIGEST-MD5 SASL mechanism options

Required	Option	Description		Example
or
optional
Required	mech=DIGEST-MD5	Gives the SASL		-o “mech=DIGEST-MD5”
		mechanism.
Required	authid=authid_value	Gives the ID used to		-o
		authenticate to the server. “authid=dn:uid=msmith,ou=People,o=example.com"
		authid_value can be
		the following:
		•	UID. For example,
			msmith.
		•	u: uid. For
			example, u: msmith.
		• dn: dn_value. For
			example, see the next
			column.
Optional	secprop=value	The secprop attribute		-o “secprop=noplain,noanonymous,
		sets the security		maxssf=128,minssf=128”
		properties for the
		connection. The secprop
		value can be any of the
		following:
		•	None
		•	noplain
			Do not permit
			mechanisms
			susceptible to simple
			passive attack.
		•	noanonymous
			Do not permit
			mechanisms that
			allow anonymous
			access.
		•	minssf
			Require a minimum
			security strength; this
			option needs a
			numeric value
			specifying bits of
			encryption. A value of
			-1means integrity is
			provided without
			privacy.
		•	maxssf
			Require a maximum
			security strength; this

option needs a numeric value specifying bits of encryption. A value of -1means integrity is provided without privacy. The maximum value is 128.

198 Command-line utilities