1 # Enabled authentication mechanisms (space-separated list).
2 # You can list many mechanisms at once, then the user can choose
3 # by adding e.g. '?authmech=gssapi' to their host specification.
4 # For other options, refer to SASL pluginviewer command output.
5 mech_list: plain login digest-md5 gssapi
7 # If deferring to the SASL auth daemon (runs as root, can do PAM
8 # login using regular user accounts, unprivileged daemons cannot).
9 #pwcheck_method: saslauthd
11 # If using plain/digest-md5 for user database, this sets the file
12 # containing the passwords. Use 'saslpasswd2 -a pmcd [username]'
13 # to add entries and 'sasldblistusers2 -f $sasldb_path' to browse.
14 # Note: must be readable as the PCP daemons user (chown root:pcp).
15 sasldb_path: /etc/pcp/passwd.db
17 # Before using Kerberos via GSSAPI, you need a service principal on
18 # the KDC server for pmcd, and that to be exported to the keytab.
19 #keytab: /etc/pcp/krb5.tab