# Install cyrus-sasl with Homebrew, apk, dnf, Nix, pacman, zypper Simple Authentication and Security Layer. Version 2.1.28 via Homebrew; verified from local package data. ## Install ```sh sudo av install brew:cyrus-sasl ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install cyrus-sasl ``` Evidence: local Homebrew formula metadata ### Linux - apk (92%): ```sh sudo apk add cyrus-sasl ``` Evidence: Alpine Linux edge package indexes: cyrus-sasl from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz - dnf (92%): ```sh sudo dnf install cyrus-sasl ``` Evidence: Fedora Rawhide package metadata: cyrus-sasl from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst - Nix (92%): ```sh nix profile install nixpkgs#cyrus_sasl ``` Evidence: nixpkgs package indexes: pkgs/by-name/cy/cyrus_sasl/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - pacman (92%): ```sh sudo pacman -S cyrus-sasl ``` Evidence: Arch Linux sync databases: cyrus-sasl from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz - zypper (92%): ```sh sudo zypper install cyrus-sasl ``` Evidence: openSUSE Tumbleweed package metadata: cyrus-sasl from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst ## Package facts - **Package key:** brew:cyrus-sasl - **Package manager:** Homebrew - **Package manager page:** - **Version:** 2.1.28 - **Source summary:** Simple Authentication and Security Layer - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** BSD-3-Clause-Attribution - **Source archive:** - **Generated:** 2026-07-08T07:18:31+00:00 ## Executables - pluginviewer (cli) - saslauthd (cli) - sasldblistusers2 (cli) - saslpasswd2 (cli) - testsaslauthd (cli) - pluginviewer (alias) - saslauthd (alias) - sasldblistusers2 (alias) - saslpasswd2 (alias) - testsaslauthd (alias) ## Dependencies - krb5 - openssl@3 ## Uses from macOS - libxcrypt ## Install behavior - Post-install hook: not defined - Bottle: available on arm64_big_sur, arm64_linux, arm64_monterey, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, big_sur, monterey, sonoma, ventura, x86_64_linux ## Freshness - Page generated: 2026-07-08 - Package-manager version: 2.1.28 - Local data: ok - Upstream repository: https://github.com/cyrusimap/cyrus-sasl - info: No package-manager update timestamp was available. - info: No cached GitHub release or tag data was available. ## Project history and usage Cyrus SASL is the Cyrus project's C implementation of the Simple Authentication and Security Layer API. It lets client and server applications plug in authentication mechanisms such as PLAIN, SCRAM, GSSAPI, OTP, EXTERNAL, and others without each application implementing every mechanism itself. ### Project history The official documentation ties Cyrus SASL to the Carnegie Mellon Cyrus project, originally an enterprise mail-system effort interested in scalable, administrable systems. Cyrus SASL split out the authentication layer as a reusable library for both client and server writers. The modern documentation describes Cyrus SASL as an implementation of the SASL specification, with Cyrus IMAP as one major consumer but not the only one. The package includes the library, authentication daemons and utilities, mechanism plugins, and sysadmin/developer documentation. The documentation still carries upgrade material for SASLv1 to SASLv2 applications, which reflects the library's long service life across older mail and network-service deployments. ### Adoption history Cyrus SASL became infrastructure rather than an end-user app: mail servers, LDAP stacks, Kerberos/GSSAPI deployments, and other network services could depend on a common SASL implementation. The official feature list shows plugins for local databases, PAM, SQL, LDAP, Active Directory, Kerberos, proxied IMAP auth, and multiple SASL mechanisms. Package managers keep Cyrus SASL available because many other packages need headers, libraries, plugins, or command-line utilities such as saslauthd and saslpasswd2. It is the sort of package that appears quietly in dependency trees and becomes visible when authentication fails. ### How it is used Administrators use Cyrus SASL by installing the library and desired plugins, selecting mechanisms, configuring application-specific SASL options, and optionally running saslauthd. Application developers link against libsasl and use callbacks or configuration files to let SASL perform authentication and authorization services. The installation guide documents application configuration through the application's own config callback or through per-application SASL configuration files such as /usr/lib/sasl/Appname.conf. ### Why package nerds care Cyrus SASL is package-nerd-significant because it is glue code for authentication. It is not flashy, but it explains why mail, LDAP, and Kerberos-capable server packages often drag in sasl libraries, mechanism plugins, and helper daemons. ### Timeline - 1990s: Cyrus project at Carnegie Mellon builds scalable mail-system infrastructure. - 2006: RFC 4422 defines the modern SASL framework referenced by Cyrus SASL documentation. - 2016: cyrusimap/cyrus-sasl repository appears on GitHub. - 2022: Cyrus SASL 2.1.28 documented as the latest stable version on the official site. ### Related projects - Cyrus IMAP uses Cyrus SASL for mail-server authentication support. - Kerberos, LDAP, PAM, SQL databases, and SASL mechanism RFCs are common integration points. - OpenLDAP and other network services are frequent downstream users of SASL libraries. ### Sources - - - - - - ## Security Notes narrow executable package without higher-risk signals. - **Geiger risk:** green / low - narrow executable package without higher-risk signals ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: /usr/lib/sasl2/.conf, /etc/sasl2/.conf ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** cyrus-sasl - **Version Scheme:** 0 - **Revision:** 2 - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** yes - **URL Keys:** stable ## Other Package-Manager Records - Nix - cyrus_sasl: normalized package name match | nixpkgs package indexes: pkgs/by-name/cy/cyrus_sasl/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - apk - cyrus-sasl - 2.1.28-r9: normalized package name match | Alpine Linux edge package indexes: cyrus-sasl from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Cyrus Simple Authentication Service Layer (SASL) | https://www.cyrusimap.org/sasl/ - apk - cyrus-sasl-crammd5 - 2.1.28-r9: normalized package name match | Alpine Linux edge package indexes: cyrus-sasl-crammd5 from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Cyrus SASL plugin for crammd5 | https://www.cyrusimap.org/sasl/ - apk - cyrus-sasl-dev - 2.1.28-r9: normalized package name match | Alpine Linux edge package indexes: cyrus-sasl-dev from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Cyrus Simple Authentication Service Layer (SASL) (development files) | https://www.cyrusimap.org/sasl/ - apk - cyrus-sasl-digestmd5 - 2.1.28-r9: normalized package name match | Alpine Linux edge package indexes: cyrus-sasl-digestmd5 from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Cyrus SASL plugin for digestmd5 | https://www.cyrusimap.org/sasl/ - apk - cyrus-sasl-doc - 2.1.28-r9: normalized package name match | Alpine Linux edge package indexes: cyrus-sasl-doc from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Cyrus Simple Authentication Service Layer (SASL) (documentation) | https://www.cyrusimap.org/sasl/ - apk - cyrus-sasl-gs2 - 2.1.28-r9: normalized package name match | Alpine Linux edge package indexes: cyrus-sasl-gs2 from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Cyrus SASL plugin for gs2 | https://www.cyrusimap.org/sasl/ - apk - cyrus-sasl-gssapiv2 - 2.1.28-r9: normalized package name match | Alpine Linux edge package indexes: cyrus-sasl-gssapiv2 from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Cyrus SASL plugin for gssapiv2 | https://www.cyrusimap.org/sasl/ - apk - cyrus-sasl-login - 2.1.28-r9: normalized package name match | Alpine Linux edge package indexes: cyrus-sasl-login from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Cyrus SASL plugin for login | https://www.cyrusimap.org/sasl/ - apk - cyrus-sasl-ntlm - 2.1.28-r9: normalized package name match | Alpine Linux edge package indexes: cyrus-sasl-ntlm from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Cyrus SASL plugin for ntlm | https://www.cyrusimap.org/sasl/ - apk - cyrus-sasl-openrc - 2.1.28-r9: normalized package name match | Alpine Linux edge package indexes: cyrus-sasl-openrc from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Cyrus Simple Authentication Service Layer (SASL) (OpenRC init scripts) | https://www.cyrusimap.org/sasl/ - apk - cyrus-sasl-scram - 2.1.28-r9: normalized package name match | Alpine Linux edge package indexes: cyrus-sasl-scram from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Cyrus SASL plugin for scram | https://www.cyrusimap.org/sasl/ - apk - cyrus-sasl-sql - 2.1.28-r9: normalized package name match | Alpine Linux edge package indexes: cyrus-sasl-sql from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Cyrus SASL plugin for sql | https://www.cyrusimap.org/sasl/ - apk - cyrus-sasl-static - 2.1.28-r9: normalized package name match | Alpine Linux edge package indexes: cyrus-sasl-static from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Cyrus Simple Authentication Service Layer (SASL) (static library) | https://www.cyrusimap.org/sasl/ - apk - libsasl - 2.1.28-r9: normalized package name match | Alpine Linux edge package indexes: libsasl from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Cyrus Simple Authentication and Security Layer (SASL) library | https://www.cyrusimap.org/sasl/ - dnf - cyrus-sasl - 2.1.28-35.fc44: normalized package name match | Fedora Rawhide package metadata: cyrus-sasl from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst | The Cyrus SASL library | https://www.cyrusimap.org/sasl/ ## Related links - [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://www.automicvault.com/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [Security and crypto packages](https://www.automicvault.com/pkg/security-crypto-tools/) - Matched security, identity, cryptography, password, signing, or certificate metadata. - [Homebrew utility packages](https://www.automicvault.com/pkg/brew-utility-packages/) - Matched Homebrew package provider. - [krb5](https://www.automicvault.com/pkg/brew/krb5/) - Runtime dependency declared by Homebrew. - [openssl@3](https://www.automicvault.com/pkg/brew/openssl-3/) - Runtime dependency declared by Homebrew. - [google-authenticator-libpam](https://www.automicvault.com/pkg/brew/google-authenticator-libpam/) - Shares av.db curated category or tags: authentication, cli, security. - [libyubikey](https://www.automicvault.com/pkg/brew/libyubikey/) - Shares av.db curated category or tags: authentication, cli, library, security. - [linux-pam](https://www.automicvault.com/pkg/brew/linux-pam/) - Shares av.db curated category or tags: authentication, cli, security. - [oath-toolkit](https://www.automicvault.com/pkg/brew/oath-toolkit/) - Shares av.db curated category or tags: authentication, cli, security. - [oauth2_proxy](https://www.automicvault.com/pkg/brew/oauth2-proxy/) - Shares av.db curated category or tags: authentication, cli, security. - [pocket-id](https://www.automicvault.com/pkg/brew/pocket-id/) - Shares av.db curated category or tags: authentication, cli, security. - [stoken](https://www.automicvault.com/pkg/brew/stoken/) - Shares av.db curated category or tags: authentication, cli, security. - [heimdal](https://www.automicvault.com/pkg/brew/heimdal/) - Security-sensitive metadata or terminology overlaps. Shared terms: authentication, cli, krb5, openssl, openssl-3. - [duo_unix](https://www.automicvault.com/pkg/brew/duo-unix/) - Security-sensitive metadata or terminology overlaps. Shared terms: authentication, cli, openssl, openssl-3, security. ## Combined YAML source View the package source record on GitHub. [combined/cyrus-sasl.yml](https://github.com/automic-vault/db/blob/main/combined/cyrus-sasl.yml) ## Sources - Nucleus package database - Geiger risk classifier - package-page enrichment - curated configuration and credential file locations - curated package history - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph