---
name: "sasl-sample-server"
section: "8"
platform: "linux"
package: "sasl2-bin"
version: "2.1.28+dfsg1-9"
release: "Debian 13 (Trixie)"
platforms: ["linux"]
url: "https://new.carta.tech/sasl-sample-server"
---

# sasl-sample-server(8)

Sample server program for demonstrating and testing SASL authentication.

## NAME

sasl-sample-server — Sample server program for demonstrating and testing SASL authentication.

## SYNOPSIS

**sasl-sample-server** \[-b min=*N*,max=*N*\]  \[-e ssf=*N*,id=*ID*\]  \[-m *MECH*\]  \[-f *FLAGS*\]  \[-i local=*IP*,remote=*IP*\]  \[-p *PATH*\]  \[-d *DOM*\]  \[-u *DOM*\]  \[-s *NAME*\]  \[-l\]

## DESCRIPTION

This manual page documents briefly the  **sasl-sample-server** command.

This manual page was written for the **Debian** distribution  because the original program does not have a manual page.

**sasl-sample-server** is a program to demonstrate  and test SASL authentication. It implements the server part, and  the client part is available as sasl-sample-client.

## OPTIONS

A summary of options is included below.

- **-b**

  Number of bits to use for encryption.

  - min=N

    minimum number of bits to use (1 =\> integrity)

  - max=N

    maximum number of bits to use

- **-e**

  Assume external encryption.

  - ssf=N

    external mech provides N bits of encryption

  - id=ID

    external mech provides authentication id ID

- **-m**

  Force use of MECH for security.

- **-f**

  Set security flags.

  - noplain

    require security vs. passive attacks

  - noactive

    require security vs. active attacks

  - nodict

    require security vs. passive dictionary attacks

  - forwardsec

    require forward secrecy

  - maximum

    require all security flags

  - passcred

    attempt to pass client credentials

- **-i**

  Set IP addresses (required by some mechs).

  - local=IP;PORT

    set local address to IP, port PORT

  - remote=IP;PORT

    set remote address to IP, port PORT

- **-p**

  Colon-separated search path for mechanisms.

- **-s**

  Service name passed to mechanisms.

- **-d**

  Local server domain.

- **-u**

  User domain.

- **-l**

  Enable server-send-last.

## AUTHOR

This manual page was written by Fabian Fagerholm fabbe@debian.org for  the **Debian** system (but may be used by others). Permission is  granted to redistribute it and/or modify it under the terms of  the GNU General Public License as published by the Free  Software Foundation; either version 2 of the License, or (at  your option) any later version.