SASLPASSWD2(8)

πŸ“¦
version 2.1.28 Β· 2 versions
  • 2.1.28 Β· alpine 3.22, alpine 3.23, alpine 3.24, arch rolling, centos-stream 10, debian bookworm, debian trixie, fedora 43, fedora 44, nixpkgs unstable, opensuse-leap 16.0, ubuntu noble, ubuntu questing, ubuntu resolute, ubuntu stonking (latest)
  • 2.1.27 Β· centos-stream 9, ubuntu jammy
, in alpine 3.22, alpine 3.23, alpine 3.24, arch rolling, centos-stream 10, debian bookworm, debian trixie, fedora 43, fedora 44, nixpkgs unstable, opensuse-leap 16.0, ubuntu noble, ubuntu questing, ubuntu resolute, ubuntu stonking

πŸ’– SASLPASSWD2(8) β€” the System Manager's Manual, but make it a group chat πŸ’–

okay bestie, so we're doing saslpasswd2(8) today and honestly? it's giving admin glow-up ✨ it lives in the System Manager's Manual section, and it's the little tool that sets a user's sasl password. let's get into it 🫢


✨ NAME ✨

saslpasswd2 β€” set a user's sasl password πŸ”


🌸 SYNOPSIS 🌸

saslpasswd2 [-p] [-d] [-c] [-n] [-f file] [-u domain] [-a appname] [-v]
userid

πŸ¦‹ DESCRIPTION πŸ¦‹

so like. saslpasswd2 is the thing a server administrator uses to set a user's sasl password β€” for server programs and SASL mechanisms that use the standard libsasl database of user secrets. that's the whole job. it's not complicated, it's just important, iykyk πŸ’…


πŸ’œ OPTIONS πŸ’œ

  • -p β€” pipe mode 🚰 saslpasswd2 will neither prompt you for the password nor verify that it was entered correctly. and fun fact: this is the default when standard input is not a terminal. so if you're piping, you already got pipe mode, no cap.
  • -c β€” creates an entry for the user if the user doesn't already exist πŸŽ€ giving main character energy to brand-new users. mutually exclusive with the -d (delete user) flag β€” you literally cannot do both, pick a lane bestie.
  • -d β€” deletes the entry for the user πŸ’€ bye felicia. mutually exclusive with the -c (create user) flag. same deal, one or the other, no in-between.
  • -n β€” don't set the plaintext userPassword property for the user. only mechanism-specific secrets will be set (e.g. OTP, SCRAM, SRP) πŸ™ˆ so the plaintext vibe stays unset and you're rolling with the fancy mechanism-specific secrets instead.
  • -u domain β€” use domain for user domain (realm) 🌈
  • -f file β€” use file for sasldb πŸ“
  • -a appname β€” use appname as application name πŸ‘‘
  • -v β€” print libsasl2 version number and exit ⭐ short and sweet, it just tells you the version and dips.

and obviously there's the positional userid β€” that's the user you're doing all this for πŸ’–


πŸ”₯ SEE ALSO πŸ”₯

  • sasldblistusers2(8) β€” go look at your users, nosy ✨
  • rfc4422 β€” Simple Authentication and Security Layer (SASL) πŸ“œ the sacred text fr fr

🌸 friendly reminder: -c and -d are mutually exclusive, and -p skips both the prompt and the correctness check. know what you're typing before you type it, bestie 🫢

okay that's the whole page, you ate that πŸ’… this one's from CMU SASL, dated Mar 7, 2005 β€” vintage but still iconic, periodt. mwah πŸŽ€πŸ’–

πŸ“¦ where this page comes from