PLUGINVIEWER(8)

💅 PLUGINVIEWER — the pluginviewer(8) glow-up

okay so bestie, welcome to PLUGINVIEWER, section 8 of the System Manager's Manual 💖 she's a little diagnostic darling that lives in your system admin toolbox and she is so good at what she does.

✨ NAME ✨

pluginviewer — list loadable SASL plugins and their properties 🦋

🌸 SYNOPSIS 🌸

pluginviewer [-a] [-s] [-c] [-b min=N,max=N] [-e ssf=N,id=ID] [-m MECHS]
[-x AUXPROP_MECH] [-f FLAGS] [-p PATH]

🎀 DESCRIPTION 🎀

so pluginviewer is the one you call when your SASL installation is giving unclear. Server admins use her to troubleshoot SASL installations, and honestly? she ate. 💅

she can list your loadable (properly configured) client-side plugins, your server-side plugins, and your auxprop plugins. all of them. no crumbs left. ✨

👑 OPTIONS 👑

• -a — list auxprop plugins. that's it, that's the vibe 🫶
• -s — list server authentication (SASL) plugins 🌈
• -c — list client authentication (SASL) plugins 💜
• -b min=N1,max=N2 — list client authentication (SASL) plugins. this one is about the strength of the SASL security layer, measured in bits. min=N1 sets the minimum strength to use (and yes, 1 => integrity protection), while max=N2 sets the maximum strength to use. so the way this works: only SASL mechanisms that support a security layer with strength M such that N1 <= M <= N2 will be shown. filter queen 👑
• -e ssf=N,id=ID — assume there's an external security layer already installed (think TLS, bestie 🧚) with N-bit strength. and the ID? that's the authentication identity used by that external security layer. noted, logged, respected.
• -m MECHS — limit the listed SASL plugins to only the ones included in the MECHS list. and yes, that list is space separated, so mind your spaces 🌸
• -x AUXPROP_MECHS — limit the listed auxprop plugins to the one listed in the AUXPROP_MECHS list. also space separated 💫
• -f FLAGS — set security flags. FLAGS is a comma separated list of one or more of these security flags:
  • noplain — SASL mechanism doesn´t send password in the clear during authentication 🔒
  • noactive — require protection from active attacks 🛡️
  • nodict — require mechanisms which are secure against passive dictionary attacks 📖
  • forwardsec — require forward secrecy ✨
  • passcred — require mechanisms that can delegate client credentials 🎫
  • maximum — require all security flags. all of them. the whole entire set 💀
• -p PATH — specifies a colon-separated search path for plugins 🔍

🦋 SEE ALSO 🦋

• rfc4422 — Simple Authentication and Security Layer (SASL)

fr fr, if you're ever squinting at your SASL setup wondering who's even loaded in here — that's her. that's the moment. 💖

CMU SASL 🌸 this lil page is from Apr 10, 2006, and bestie, she has aged like fine wine. periodt. 💅✨🫶