Crams Option

The  option (available under ,  ,  , and  ) is a boolean indicating whether or not to enable the legacy Challenge-Response Authentication Mechanisms (CRAMs) including APOP and CRAM-MD5. For this to work, passwords must be stored in LDAP in plain text format and the  must have read access to the   attribute -- or in more modern configurations   must have read access to. If  is not set, the has_plain_passwords option will be used instead.

Use of this option in new deployments is strongly discouraged as these authentication mechanisms provide poor security characteristics for the modern Internet.

The default value is: 0

See also:
 * ugldapbinddn Option
 * ugldapbindcred Option
 * has_plain_passwords Option
 * MMP and IMAP Proxy and POP Proxy and vdomain options
 * vdomain options