Man page or keyword search:   man All Sections 1 - General Commands 2 - System Calls 3 - Subroutines, Functions 4 - Special Files 5 - File Formats 6 - Games and Screensavers 7 - Macros and Conventions 8 - Maintenence Commands 9 - Kernel Interface New Commands Server 4.4BSD AIX Alpinelinux Archlinux Aros BSDOS BSDi Bifrost CentOS Cygwin Darwin Debian DigitalUNIX DragonFly ElementaryOS Fedora FreeBSD Gentoo GhostBSD HP-UX Haiku Hurd IRIX Inferno JazzOS Kali Knoppix LinuxMint MacOSX Mageia Mandriva Manjaro Minix MirBSD NeXTSTEP NetBSD OPENSTEP OSF1 OpenBSD OpenDarwin OpenIndiana OpenMandriva OpenServer OpenSuSE OpenVMS Oracle PC-BSD Peanut Pidora Plan9 QNX Raspbian RedHat Scientific Slackware SmartOS Solaris SuSE SunOS Syllable Tru64 UNIXv7 Ubuntu Ultrix UnixWare Xenix YellowDog aLinux   31559 pages apropos Keyword Search (all sections) Output format html ascii pdf view pdf save postscript

SASL.CONF(1)   User Contributed Perl Documentation   SASL.CONF(1)

NAME
       sasl.conf - SASL Configuration file for nnrpd.

DESCRIPTION
       The file sasl.conf in pathetc specifies Simple
       Authentication and Security Layer (SASL), defined in RFC
       2222, for nnrpd.	 Now nnrpd implements only Security Layer
       support, which is an extension of RFC 2595. This means you
       can get SSL or TLS encrypted NNRP between your server and
       newsreaders. It requires OpenSSL 0.9.3 or newer
       http://www.openssl.org/; it has been tested with versions
       0.9.4 and 0.9.5.

INSTALLATION
       To use SSL, a certificate and private key are needed that
       you can create using the openssl binary.	 Make certain
       that each keys are owned by your news user, news group,
       and are mode 0640 or 0660.

       EXAMPLE

	  openssl req -new -x509 -nodes -out /usr/local/news/lib/cert.pem\
	   -days 366 -keyout /usr/local/news/lib/cert.pem
	  chown news:news /usr/local/news/lib/cert.pem
	  chmod 640 /usr/local/news/lib/cert.pem

       You also can make the keys by the root user as follows.

	  make cert

CONFIGURATION
       Comments begin with a number  sign  (#)	and  continue
       through the end of the line.  Blank lines and comments are
       ignored.	 All other lines specify parameters, and should
       be of the following form:

       Each line of the sasl.conf in pathetc has the form

	   <option>: <value>

       where <option> is the name of the configuration option
       being set  and <value> is the value that the configuration
       option is being set to.

       Blank lines and lines beginning with (#) are ignored.  For
       boolean options, the values  yes,  on,  t, and  1 turn the
       option on, the values no, off, f, and 0 turn the option
       off.

       tls_cert_file
	   The path to a file containing the server's
	   certificate.

       tls_key_file
	   The path to a file containing the server's private
	   key.

       tls_ca_path
	   The path to a directory containing the CA's
	   certificate.

       tls_ca_file
	   The path to a file containing the CA's certificate.

TO DO
       Implement methods of the authentication protocols of SASL.

HISTORY
       Written by Kenichi OKADA <okada@opaopa.org> for
       InterNetNews

SEE ALSO
       inn.conf(5), innd(8), nnrpd(8), readers.conf(5)

10/Mar/2000	       perl 5.005, patch 03	     SASL.CONF(1)

Vote for polarhome