Add WITH_SQLITE option to support sql plugin with SQLite using nork's patch. His patch was already merged into cyrus-sasl2 and will be included in next release. Requested by: nork359c6f9dd8
cyrus-sasl -- Fix off by one errorentered 2022-02-28
Port details
security/cyrus-sasl2 2.1.28_6
RFC 2222 SASL (Simple Authentication and Security Layer)
Port info
- Maintainer
- ume@FreeBSD.org
- Packages
- latest: 2.1.28_6
- Upstream
- up to date
- Last update
- to 2.1.28_6 · aac661e18b
- Quarterly
- 2026Q4: 2.1.28_6
- WWW
- https://www.cyrusimap.org/sasl/
- Links
- cgit · VuXML · Report wrong data
Install
- Package
# pkg install cyrus-saslinstalls 2.1.28_6 fromlatest; fromquarterly(2026Q4) 2.1.28_6- Port
# cd /usr/ports/security/cyrus-sasl2 && make install clean# make -C /usr/ports/security/cyrus-sasl2 config # change options first
- Size
- 1.0 MiB download · 8.2 MiB installed
- Depends on
- nothing
- License
- BSD4CLAUSE
- Options
- 14 of 21 on in the package: ANONYMOUS AUTHDAEMOND BDB1 CRAM DIGEST DOCS LMDB0 LOGIN NTLM OBSOLETE_CRAM_ATTR OBSOLETE_DIGEST_ATTR OTP PLAIN SCRAM
Show the 7 options that are off
ALWAYSTRUE BDB GDBM KEEP_DB_OPEN LMDB OPIE SASLDB_IN_VAR - pkg-message
Shown after installing
You can use sasldb2 for authentication, to add users use: saslpasswd2 -c username If you want to enable SMTP AUTH with the system Sendmail, read Sendmail.README NOTE: This port has been compiled with a default pwcheck_method of auxprop. If you want to authenticate your user by /etc/passwd, PAM or LDAP, install ports/security/cyrus-sasl2-saslauthd and set sasl_pwcheck_method to saslauthd after installing the Cyrus-IMAPd 2.X port. You should also check the /usr/local/lib/sasl2/*.conf files for the correct pwcheck_method. If you want to use GSSAPI mechanism, install ports/security/cyrus-sasl2-gssapi. If you want to use SRP mechanism, install ports/security/cyrus-sasl2-srp. If you want to use LDAP auxprop plugin, install ports/security/cyrus-sasl2-ldapdb.
Packages by version and architecture
latest
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 2.1.28_6 | 2.1.28_6 | – |
| FreeBSD 15 | 2.1.28_6 | 2.1.28_6 | – |
| FreeBSD 14 | 2.1.28_6 | 2.1.28_6 | 2.1.28_6 |
quarterly (2026Q4)
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 2.1.28_6 | 2.1.28_6 | – |
| FreeBSD 14 | 2.1.28_6 | 2.1.28_6 | 2.1.28_6 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Unaddressed and VuXML only (0)
No unaddressed CVE and nothing reported by
pkg audit for the packaged version 2.1.28_6.Fixed (5)
Show 5 fixed
VuXML entries whose affected range the packaged version has left.
cyrus-sasl -- buffer overflow vulnerabilityentered 2009-05-15
cyrus-sasl -- DIGEST-MD5 Pre-Authentication Denial of Serviceentered 2006-04-22
cyrus-sasl -- potential buffer overflow in DIGEST-MD5 pluginentered 2004-10-12
no CVE referenced
cyrus-sasl -- dynamic library loading and set-user-ID applicationsentered 2004-10-08
Problem reports (0) · open in Bugzilla, most recently changed first
None.
Commits (282)
Remove databases/postgresql-client because there can't be a -server, and having it installed prevents databases/postgresql7 from being installed, leading to some dependencies problems4031a6967c
make the default location of running directory of saslauthd customizable by SASLAUTHD_RUNPATH variable. PR: ports/66521f6d66d8cb6
use LOCALBASE for dependent packages instead of PREFIX.f3147bb437
prefer /usr/sbin/nologin than /sbin/nologin when creating user cyrus. Requested by: nork026ebc1dee
When there is user cyrus, don't overwrite the user. It helps updating cyrus-sasl2 without updating cyrus-imapd*.4350c75ac8
cosmetic changes.9fc0a4b074
PGSQL may be built with GSSAPI. Reported by: "Wolfram A. Kraushaar" <wak@prioris.dstm.de>df96daf576
Don't allow enabling MySQL or PGSQL implicitly. Submitted by: norkb3ec68c311
Update to 2.1.18.f81c417e8a
Set an appropriate LATEST_LINK to avoid conflicts with other ports. Reported by: kris4e6c2f5ad4
SIZEfya5b60fe19e
Support Berkeley DB 4.2. Since our db42 requires to include db.h to use. existing configure script cannot detect our db42. AC_CHECK_LIB() simply test if a function exists. :( Requested by: Dmitry Sorokin <dmitry_sorokin@yahoo.ca>153d604e24
add WITHOUT_LOGIN and WITHOUT_PLAIN. Requested by: Hans Hbner <hans@huebner.org>acbb60393b
add WITH_PGSQL knob which supports sql plugin with postgresql backend. PR: ports/60606 Submitted by: mat094e9b4741
- space before and after `(' and ')' [1] - bump version [2]
PR: ports/60392 [1]
Submitted by: Oleg Sharoiko <os@rsu.ru> [1]
Reported by: jeh [2]72300db3c3${OSVERSION} must be after including bsd.port.pre.mk.
Reported by: "Dan Langille" <dan@langille.org>4d1d79eb80since 5-CURRENT has Kerberos5 as default, enable Kerberos5 as default on 5-CURRENT. Submitted by: Sean McNeil <sean@mcneil.com>26ebc4ff54
fix build with heimdal. Submitted by: tiamat@komi.mts.rufa6289a40d
Update to 2.1.17.8d4df4b343
add WITH_ALWAYSTRUE option. Requested by: Ted Cabeen <secabeen@pobox.com>fa1dd0fe6c
USE_OPENSSL must be set before including bsd.port.pre.mk. Reported by: Fritz Heinrichmeyer <Fritz.Heinrichmeyer@Fernuni-Hagen.de>d6c32c2c40
Use USE_OPENSSL.646d8a6bc5
Oops, WITH_MYSQL must be set when WITH_MYSQL_VER is defined.9b954c0e2a
Use USE_MYSQL.e7e704bd6a
Remove obsoleted comment about use of saslauthd. Reported by: nork6dd285b187
Add WITH_DEV_URANDOM option to use /dev/urandom instead of /dev/random.b32f59c7bc
Stop installing Sendmail.conf by cyrus-sasl2, and it is now installed by cyrus-sasl2-saslauthd. Since if Sendmail.conf is not installed, SASL2 uses auxprop by default, it is enough to install Sendmail.conf by saslauthd port.f0922b5aa5
Update to 2.1.15.bcf750fff8
Reduce warnings during build on 5-CURRENT. Submitted by: Oliver Eikemeier <eikemeier@fillmore-labs.com>3daa1a78aa
- made old distfile fetchable after an update. - install missing document which was added during update to 2.1.14. PR: ports/53932 (partly) Submitted by: Oliver Eikemeier <eikemeier@fillmore-labs.com>a8637096c3
It seems MySQL 4.X support in 2.1.14 is still incomplete.2fa6eec717
Update to 2.1.14.a02fef83a0
Sync with cyrus-sasl port. There is no functional change. Obtained from: cyrus-sasl porte174cc8477
fix plist. Submitted by: bento via kris44d66a7787
- Make saslauthd a separate port to avoid dependency loop between cyrus-sasl2 and openldap. - Stop using configuration menu. I believe it ease to maintain consistency with other SASL related ports.10a0e3c217
remove useless trailing backslant.4db2a48741
make MySQL plugin work with MySQL 4.X.ea0e64f4a1
add WITHOUT_SASLAUTHD option.c109d23603
Sync the way how to handle Kerberos with latest security/cyrus-sasl. Obtained from: security/cyrus-sasle3080ee5ce
When sending mail localy on a system compiled woth SASL AUTH, the sendmail mail submission program may log the following error on the sasldb file: error: safesasl(/usr/local/etc/sasldb) failed: Group readable file Pine by default is using SMTP, and therfore SMTP AUTH if compiled into sendmail. To disable SMTP AUTH we need to define DAEMON_OPTIONS for the loopback interface. PR: ports/51680 Submitted by: Scot W. Hetzel <hetzels@westbend.net>69ba81477e
Add option WITHOUT_NTLM. Submitted by: Dan Larsson <dl@tyfon.net>f183b01d25
Change the group of /var/state/saslauthd mail to be sync with /usr/local/etc/sasldb2. The postfix should belongs to only mail group. Reported by: "Denis N. Peplin" <info@volginfo.ru>fc645c780e
Use security/openssl/bsd.openssl.mk. PR: ports/51090 Submitted by: Oleg Sharoiko <os@rsu.ru> (with modification by me)ecd654ca77
Make MySQL 3.23, 4.0 and 4.1 selectable. Requested by: Matthias Fechner <idefix@fechner.net>1589b46341
- The pidfile of saslauthd was changed. - The configure script should select correct version of Berkeley DB. PR: ports/51041 Submitted by: Oliver Eikemeier <eikemeier@fillmore-labs.com>7c68e37ee3
make configure script pickking up the Heimdal Kerberos that's in FreeBSD's base. Submitted by: Graeme Mathieson <mathie@wossname.org.uk>48f2e38af8
make WITH_LDAP21 work. Submitted by: Oliver Eikemeier <eikemeier@fillmore-labs.com>06eefa7d9c
add missing files which should be committed by previous committed.a9e1af35e5
- update to 2.1.13 - fixes for 5-CURRENT (changed behaviour of 'expr') - enable NTLM module - support for db4 and db4.1 - support for OpenLDAP 2.1 PR: ports/50962 Submitted by: Oliver Eikemeier <eikemeier@fillmore-labs.com>45e33242b8