Diff

plugins/mod_saslauth.lua @ 7298:7056bbaf81ee

mod_saslauth: Disable DIGEST-MD5 by default (closes #515)
author Kim Alvefur <zash@zash.se>
date Fri, 18 Mar 2016 11:51:58 +0100
parent 6519:367db22cf7d2
child 7784:9f70d35a1602
line wrap: on
line diff
--- a/plugins/mod_saslauth.lua	Fri Mar 18 00:08:33 2016 +0100
+++ b/plugins/mod_saslauth.lua	Fri Mar 18 11:51:58 2016 +0100
@@ -19,7 +19,7 @@
 local secure_auth_only = module:get_option_boolean("c2s_require_encryption", module:get_option_boolean("require_encryption", false));
 local allow_unencrypted_plain_auth = module:get_option_boolean("allow_unencrypted_plain_auth", false)
 local insecure_mechanisms = module:get_option_set("insecure_sasl_mechanisms", allow_unencrypted_plain_auth and {} or {"PLAIN", "LOGIN"});
-local disabled_mechanisms = module:get_option_set("disable_sasl_mechanisms", {});
+local disabled_mechanisms = module:get_option_set("disable_sasl_mechanisms", { "DIGEST-MD5" });
 
 local log = module._log;