Dear Philip and all,
while reusing the code in src/auths/pwcheck.c I noticed a potential
problem in saslauthd_verify_password
where towards the end you have:
*reply = daemon_reply;
that should be, like all other assignements:
if (reply)
*reply = daemon_reply;
I was hit by this while calling the function with a NULL reply.
I hope Philip you will not mind if I liberally take from that source
to develop an apache mod_authnz_sasl module (for apache2). Almost done..
Thanks
Giuliano