> >>And it is a one time password ticket, only valid for 30seconds. So you > >>you think this is a security risk? > > If it's a timepassword ticket, no problem ! > But do we need sasl for this ? no