SASL-SAMPLE-CLIENT(8)

💖 SASL-SAMPLE-CLIENT(8) 💖

okay bestie, sit down, grab a strawberry 🍓 — this is the manual page for sasl-sample-client, living in section 8 of the System Manager's Manual, and we're gonna read it together like it's a group chat. no cap.

✨ NAME ✨

sasl-sample-client — the sample client program for demonstrating and testing SASL authentication. it's giving "demo mode but make it legit" 💅

🌸 SYNOPSIS 🌸

sasl-sample-client [-b min=N,max=N] [-e ssf=N,id=ID] [-m MECH] [-f FLAGS]
                   [-i local=IP,remote=IP] [-p PATH] [-s NAME] [-n FQDN]
                   [-u ID] [-a ID]

like, look at all those flags. she's versatile. she contains multitudes. 🦋

🎀 DESCRIPTION 🎀

so this page is a lil quick rundown of the sasl-sample-client command — the brief version, the TL;DR, the "here's what u need to know" 💖

fun lore drop: this manual page was written for the Debian distribution specifically, because the original program straight up doesn't have a manual page. not me filling in the gaps for the whole community 😭 iconic behaviour honestly.

sasl-sample-client is a program that demonstrates and tests SASL authentication. it implements the client part of the equation — and the server part? that's living her best life over in sasl-sample-server. they're a duo. a pair. soulmates, fr fr. 👑

💅 OPTIONS 💅

here's the summary of options, bestie — every single one, no skips, we don't do that here:

• -b — number of bits to use for encryption 🔐
  • min=N — minimum number of bits to use (and heads up: 1 => integrity)
  • max=N — maximum number of bits to use
• -e — assume external encryption ✨
  • ssf=N — external mech provides N bits of encryption
  • id=ID — external mech provides authentication id ID
• -m — force use of MECH for security 🫶
• -f — set security flags 🚩
  • noplain — require security vs. passive attacks
  • noactive — require security vs. active attacks
  • nodict — require security vs. passive dictionary attacks
  • forwardsec — require forward secrecy
  • maximum — require all security flags
  • passcred — attempt to pass client credentials
• -i — set IP addresses (some mechs literally require this, so don't skip it) 📍
  • local=IP;PORT — set local address to IP, port PORT
  • remote=IP;PORT — set remote address to IP, port PORT
• -p — colon-separated search path for mechanisms 🔎
• -r — realm to use
• -s — service name passed to mechanisms
• -n — server fully-qualified domain name 🌐
• -u — user (authorization) id to request
• -a — id to authenticate as
• -d — disable client-send-first 🙈
• -l — enable server-send-last

ok tiny heads-up bestie: -r shows up in the OPTIONS list but not in the SYNOPSIS. not me noticing that. it's still a real flag, we're still listing it, we're just observing. 👀

👑 AUTHOR 👑

this manual page was written by Fabian Fagerholm fabbe@debian.org for the Debian system (but it may be used by others — sharing is caring, we love that 🫶). permission is granted to redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation — either version 2 of the License, or (at your option) any later version. periodt.

and that's the whole page, bestie!! 💖 SASL-SAMPLE-CLIENT(8), section 8 of the System Manager's Manual, done and dusted, slayed, no crumbs left. go forth and authenticate. 🌈✨🎀