CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

security/cyrus-sasl2-saslauthd 2.1.28_4

SASL authentication server for cyrus-sasl2

Port info

Maintainer
ume@FreeBSD.org
Packages
latest: 2.1.28_4
Upstream
up to date
Last update
to 2.1.28_4 · 7eb9b79b1d
Quarterly
2026Q4: 2.1.28_4
WWW
https://www.cyrusimap.org/sasl/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install cyrus-sasl-saslauthd
installs 2.1.28_4 from latest; from quarterly (2026Q4) 2.1.28_4
Port
# cd /usr/ports/security/cyrus-sasl2-saslauthd && make install clean
# make -C /usr/ports/security/cyrus-sasl2-saslauthd config  # change options first
Size
45 KiB download · 105 KiB installed
Depends on
security/cyrus-sasl2 2.1.28_6
License
BSD4CLAUSE
Options
4 of 12 on in the package: BDB1 DOCS GSSAPI_BASE LMDB0
Show the 8 options that are off
BDB GDBM GSSAPI_HEIMDAL GSSAPI_MIT HTTPFORM LMDB OPENLDAP SASLDB_IN_VAR
pkg-message
Shown after installing
To run saslauthd from startup, add saslauthd_enable="YES" in your
/etc/rc.conf.

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 162.1.28_42.1.28_4–
FreeBSD 152.1.28_42.1.28_4–
FreeBSD 142.1.28_42.1.28_42.1.28_4

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 152.1.28_42.1.28_4–
FreeBSD 142.1.28_42.1.28_42.1.28_4

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 2.1.28_4.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (115)

Hajimu UMEMOTO (ume) · 2.1.25
Convert to use new OPTIONS framework.
de6c53feba
Doug Barton (dougb) · 2.1.25
In the rc.d scripts, change assignments to rcvar to use the literal name_enable wherever possible, and ${name}_enable when it's not, to prepare for the demise of set_rcvar().

In cases where I had to hand-edit unusual instances also
modify formatting slightly to be more uniform (and in
some cases, correct). This includes adding some $FreeBSD$
tags, and most importantly moving rcvar= to right after
name= so it's clear that one is derived from the other.
83eb2c3700
Hajimu UMEMOTO (ume) · 2.1.25
Update to 2.1.25.
0f58d58a02
Hajimu UMEMOTO (ume) · 2.1.23
- Remove KERBEROS4 option which depends on a removed port   (security/krb4) - Use dirrmtry on PREFIX/lib/sasl2 where configurations may stay - Remove MD5 in distinfo

PR:		ports/152261
Submitted by:	sunpoet
d6b31373b0
Erwin Lansing (erwin) · 2.1.23
Deprecate md5 in favour of sha256 checksums.  md5 checksums will no longer be generated or checked, and will be silently ignored for now.  Also, generalize the MD5_FILE macro to DISTINFO_FILO.

PR:		149657
Submitted by:	rene
Approved by:	portmgr
Tested on:	pointyhat i386 7-exp
74cb9eff53
Doug Barton (dougb) · 2.1.23
Begin the process of deprecating sysutils/rc_subr by s#. %%RC_SUBR%%#. /etc/rc.subr#
1d6b4b3f91
Doug Barton (dougb) · 2.1.23
Fix a few "bad example" problems in the rc.d scripts that have been propogated by copy and paste.

1. Primarily the "empty variable" default assignment, which is mostly
${name}_flags="", but fix a few others as well.
2. Where they are not already documented, add the existence of the _flags
(or other deleted empties) option to the comments, and in some cases add
comments from scratch.
3. Replace things that look like:
prefix=%%PREFIX%%
command=${prefix}/sbin/foo
to just use %%PREFIX%%. In many cases the $prefix variable is only used
once, and in some cases it is not used at all.
4. In a few cases remove ${name}_flags from command_args
5. Remove a long-stale comment about putting the port's rc.d script in
/etc/rc.d (which is no longer necessary).

No PORTREVISION bumps because all of these changes are noops.
0175383f0a
Hajimu UMEMOTO (ume) · 2.1.23
Update to 2.1.23.

Security:	http://www.kb.cert.org/vuls/id/238019
a9dd98ab55
Pav Lucistnik (pav) · 2.1.22_1
- Remove conditional checks for FreeBSD 5.x and older
b2a96c6df1
Hajimu UMEMOTO (ume) · 2.1.22_1
- Install saslauthd.mdoc to ${PREFIX}/man/man8/saslauthd.8. - Use ${BDB_LIB_DIR}.

PR:		ports/127809
Submitted by:	"Scot W. Hetzel" <swhetzel__at__gmail.com>
813ceb007c
Hajimu UMEMOTO (ume) · 2.1.22
- Use OPTIONS. - Obey the default BDB version defined in bsd.database.mk.
a60962f145
Hajimu UMEMOTO (ume) · 2.1.22
Allow to build with db45 and db46 as well.
80f4aee1b7
Rong-En Fan (rafan) · 2.1.22
- Set --mandir and --infodir in CONFIGURE_ARGS if the configure script   supports them.  This is determined by running ``configure --help'' in   do-configure target and set the shell variable _LATE_CONFIGURE_ARGS   which is then passed to CONFIGURE_ARGS. - Remove --mandir and --infodir in ports' Makefile where applicable   Few ports use REINPLACE_CMD to achieve the same effect, remove them too. - 

PR:		ports/111470
Approved by:	portmgr
Discussed with:	stas (Mk/*), gerald (info related stuffs)
Tested by:	pointyhat exp run
f935a609c5
Hajimu UMEMOTO (ume) · 2.1.22
Change the MASTER_SITES entries from 	ftp://ftp.hanse.de/sites/transit/mirror/ to 	http://www.transit.hanse.de/mirror/

Requested by:	Stefan Bethke <stb__at__lassitu.de>
098bd5bc3a
Hajimu UMEMOTO (ume) · 2.1.22
krb5 1.5.1 won't build .a files by default, just .so files.

Submitted by:	Paul Vixie <paul__at__vix.com>
b724fafd67
Hajimu UMEMOTO (ume) · 2.1.22
Update to 2.1.22.
15f9163193
Hajimu UMEMOTO (ume) · 2.1.21_1
Give sensible sentences for IGNORE.

Requested by:	kris
7863fd84d3
Hajimu UMEMOTO (ume) · 2.1.21_1
Replace BROKEN with IGNORE.
a73ece0305
Hajimu UMEMOTO (ume) · 2.1.21_1
Enable support for db-4.4.
c6dd85752c
Hajimu UMEMOTO (ume) · 2.1.21_1
The Project Cyrus web site is migrated to a new server.
8408ec8077
Doug Barton (dougb) · 2.1.21_1
Remove the FreeBSD KEYWORD from all rc.d scripts where it appears. We have not checked for this KEYWORD for a long time now, so this is a complete noop, and thus no PORTREVISION bump. Removing it at this point is mostly for pedantic reasons, and partly to avoid perpetuating this anachronism by copy and paste to future scripts.
c49d1a3273
Hajimu UMEMOTO (ume) · 2.1.21_1
change /var/state/saslauthd to /var/run/saslauthd as respect hier(7).

PR:		ports/90810
Submitted by:	Artis Caune <Artis.Caune__at__latnet.lv>
4de201a19a
Hajimu UMEMOTO (ume) · 2.1.21
- use USB_BDB. - add SHA256.
816c5ada81
Hajimu UMEMOTO (ume) · 2.1.21
Update to 2.1.21.
f897ca0089
Hajimu UMEMOTO (ume) · 2.1.20_1
fix dependency.  don't forget `+'.
0e67d7c1ed
Hajimu UMEMOTO (ume) · 2.1.20_1
simplify.
08679fc01d
Hajimu UMEMOTO (ume) · 2.1.20_1
Allow to use Berkeley DB 4.3.

PR:		ports/76154
Submitted by:	Sunpoet Po-Chuan Hsieh <sunpoet@sunpoet.net>
8cac5725b5
Hajimu UMEMOTO (ume) · 2.1.20_1
use new scheme of USE_RC_SUBR.
d8c58fe303
Hajimu UMEMOTO (ume) · 2.1.20_1
build & install two useful programs; testsaslauthd and saslcache.

Submitted by:	Yuri Ryazantsev <yuri@unix.ru>
67b415bb40
Hajimu UMEMOTO (ume) · 2.1.20
remove needless definition.
c306c511b4
Hajimu UMEMOTO (ume) · 2.1.20
cyrus-sasl2-saslauthd couldn't be built with system OpenSSL and BDB42.

PR:		ports/74463
Submitted by:	NIIMI Satoshi <sa2c@sa2c.net>
78fe274d6c
Hajimu UMEMOTO (ume) · 2.1.20
Fix build with gssapi and krb5

PR:		ports/74321
Submitted by:	Florian Kraft <lra.hassberge@gmx.de>
88bbd748e9
Hajimu UMEMOTO (ume) · 2.1.20
Update to 2.1.20.

* Fixes to cram plugin to avoid attempting to canonify uninitialized data.
  * NTLM portability fixes.
  * Avoid potential attack using SASL_PATH when sasl is used in a setuid
    environment.
  * A trivial number of small bugfixes.
718daad6eb
Hajimu UMEMOTO (ume) · 2.1.19
Update to 2.1.19.
08de8a9c7e
Hajimu UMEMOTO (ume) · 2.1.18_2
use `command_args' instead of overriding `flags'.
b244688d9b
Hajimu UMEMOTO (ume) · 2.1.18_1
make the default location of running directory of saslauthd customizable by SASLAUTHD_RUNPATH variable.

PR:		ports/66521
f6d66d8cb6
Hajimu UMEMOTO (ume) · 2.1.18_1
use LOCALBASE for dependent packages instead of PREFIX.
f3147bb437
Hajimu UMEMOTO (ume) · 2.1.18_1
oops, I forget to add this file.
d821e98035
Hajimu UMEMOTO (ume) · 2.1.18_1
- add saslauthd_runpath option to change run path which is specified   by -m option of saslauthd.  since this option affects a location of   a pidfile, we need to separate it from saslauthd_flags.[1] - change the default of saslauthd_enable to NO as other potrs do.

Requested by:	"Paul-Andrew Joseph Miseiko" <esoteric@teardrop.ca> [1]
26d924929a
Hajimu UMEMOTO (ume) · 2.1.18
Update to 2.1.18.
f81c417e8a
Hajimu UMEMOTO (ume) · 2.1.17_1
Support Berkeley DB 4.2. Since our db42 requires to include db.h to use. existing configure script cannot detect our db42.  AC_CHECK_LIB() simply test if a function exists. :(

Requested by:	Dmitry Sorokin <dmitry_sorokin@yahoo.ca>
153d604e24
Hajimu UMEMOTO (ume) · 2.1.17_1
- space before and after `(' and ')' [1] - bump version [2]

PR:		ports/60392 [1]
Submitted by:	Oleg Sharoiko <os@rsu.ru> [1]
Reported by:	jeh [2]
72300db3c3
Hajimu UMEMOTO (ume) · 2.1.17
${OSVERSION} must be after including bsd.port.pre.mk.

Reported by:	"Dan Langille" <dan@langille.org>
4d1d79eb80
Hajimu UMEMOTO (ume) · 2.1.17
since 5-CURRENT has Kerberos5 as default, enable Kerberos5 as default on 5-CURRENT.

Submitted by:	Sean McNeil <sean@mcneil.com>
26ebc4ff54
Hajimu UMEMOTO (ume) · 2.1.17
fix build with heimdal.

Submitted by:	tiamat@komi.mts.ru
fa6289a40d
Hajimu UMEMOTO (ume) · 2.1.17
Update to 2.1.17.
8d4df4b343
Hajimu UMEMOTO (ume) · 2.1.15_3
build package again.  the problem was fixed by bsd.port.mk 1.469 (PR 58885).

Submitted by:	Oliver Eikemeier <eikemeier@fillmore-labs.com>
60fd47a5f8
Hajimu UMEMOTO (ume) · 2.1.15_3
mark NO_PACKAGE instead of BROKEN.  Though it fails to build package on bento, at least it can be installed from port.
e85f1e7db6
Kris Kennaway (kris) · 2.1.15_3
Mark BROKEN (see bento logs).  These ports are scheduled for removal after Feb 2 2004 if they are still broken at that time and no fixes have been submitted by PR.
09b69954f2
Hajimu UMEMOTO (ume) · 2.1.15_3
the start/stop scripts failed when booting on 5.x machines

Submitted by:	Barry Pederson <bp@barryp.org>
0bfa2a5bc6