Authen::SASL::Perl::DIGEST_MD5(3pm)

NAME

Authen::SASL::Perl::DIGEST_MD5 - (DEPRECATED) Digest MD5 Authentication class

VERSION

version 2.2100

SYNOPSIS

  use Authen::SASL qw(Perl);
  $sasl = Authen::SASL->new(
    mechanism => 'DIGEST-MD5',
    callback  => {
      user => $user, 
      pass => $pass,
      serv => $serv
    },
  );

DESCRIPTION

This method implements the client and server parts of the DIGEST-MD5 SASL algorithm, as described in RFC 2831.

Please note that this mechanism has been moved to the "OBSOLETE" section of the mechanism registry <https://www.iana.org/assignments/sasl-mechanisms/sasl-mechanisms.xhtml> as per RFC6331 <https://www.rfc-editor.org/rfc/rfc6331.html>.

CALLBACK

The callbacks used are:

client

authname: The authorization id to use after successful authentication

user: The username to be used in the response

pass: The password to be used to compute the response.

serv: The service name when authenticating to a replicated service

realm

The authentication realm when overriding the server-provided default. If not given the server-provided value is used.

The callback will be passed the list of realms that the server provided in the initial response.

server

realm: The default realm to provide to the client

getsecret(username, realm, authzid): returns the password associated with "username" and "realm"

PROPERTIES

The properties used are:

maxbuf: The maximum buffer size for receiving cipher text

minssf: The minimum SSF value that should be provided by the SASL security layer. The default is 0

maxssf: The maximum SSF value that should be provided by the SASL security layer. The default is 2**31

externalssf: The SSF value provided by an underlying external security layer. The default is 0

ssf: The actual SSF value provided by the SASL security layer after the SASL authentication phase has been completed. This value is read-only and set by the implementation after the SASL authentication phase has been completed.

maxout: The maximum plaintext buffer size for sending data to the peer. This value is set by the implementation after the SASL authentication phase has been completed and a SASL security layer is in effect.

AUTHORS

Graham Barr, Djamel Boudjerda (NEXOR), Paul Connolly, Julian Onions (NEXOR), Yann Kerherve.

Please report any bugs, or post any suggestions, to the perl-ldap mailing list <[email protected]>

COPYRIGHT

Copyright (c) 2003-2009 Graham Barr, Djamel Boudjerda, Paul Connolly, Julian Onions, Nexor, Peter Marschall and Yann Kerherve. All rights reserved. This program is free software; you can redistribute it and/or modify it under the same terms as Perl itself.