PLUGINVIEWER(8)		    System Manager's Manual	       PLUGINVIEWER(8)




NAME
       pluginviewer - list loadable SASL plugins and their properties

SYNOPSIS
       pluginviewer [-a] [-s] [-c] [-b min=N,max=N] [-e ssf=N,id=ID]
       [-m MECHS] [-x AUXPROP_MECH] [-f FLAGS] [-p PATH]

DESCRIPTION
       pluginviewer can be used by a server administrator to troubleshoot SASL
       installations.  The utility can list loadable (properly configured)
       client and server side plugins, as well as auxprop plugins.

OPTIONS
       -a     List auxprop plugins.

       -s     List server authentication (SASL) plugins.

       -c     List client authentication (SASL) plugins.

       -b min=N1,max=N2
	      List client authentication (SASL) plugins.  Strength of the SASL
	      security layer in bits. min=N1 specifies the minimum strength to
	      use (1 => integrity protection). max=N2 specifies the maximum
	      strength to use.	Only SASL mechanisms which support security
	      layer with strength M such that N1 <= M <= N2 will be shown.

       -e ssf=N,id=ID
	      Assume that an external security layer (e.g. TLS) with N-bit
	      strength is installed.  The ID is the authentication identity
	      used by the external security layer.

       -m MECHS
	      Limit listed SASL plugins to the ones included in the MECHS
	      (space separated) list.

       -x AUXPROP_MECHS
	      Limit listed auxprop plugins to the one listed in the
	      AUXPROP_MECHS (space separated) list.

       -f FLAGS
	      Set security flags. FLAGS is a comma separated list of one or
	      more of the following security flags: noplain (SASL mechanism
	      doesn´t send password in the clear during authentication),
	      noactive (require protection from active attacks), nodict
	      (require mechanisms which are secure against passive dictionary
	      attacks), forwardsec (require forward secrecy), passcred
	      (require mechanisms that can delegate client credentials),
	      maximum (require all security flags).

       -p PATH
	      Specifies a colon-separated search path for plugins.

SEE ALSO
       rfc4422 - Simple Authentication and Security Layer (SASL)

CMU SASL			April 10, 2006		       PLUGINVIEWER(8)