diff --git a/cyrus-sasl.spec b/cyrus-sasl.spec
index f9c7243d7b4ac5dddb4a2732817ccb45a1fc80bc..174b8c7d38a70396b4e076fe9686cc3ff3637ca9 100644
--- a/cyrus-sasl.spec
+++ b/cyrus-sasl.spec
@@ -6,7 +6,7 @@
 
 Name: cyrus-sasl
 Version: 2.1.28
-Release: 7
+Release: 8
 Summary: The Cyrus SASL API Implementation
 
 License: BSD with advertising
@@ -237,7 +237,6 @@ getent passwd %{username} >/dev/null || useradd -r -g %{username} -d %{homedir}
 %files lib
 %{_libdir}/libsasl*.so.*
 %dir %{_sysconfdir}/sasl2
-%{_libdir}/libsasl*.so.*
 %dir %{_libdir}/sasl2/
 %{_libdir}/sasl2/*anonymous*.so*
 %{_libdir}/sasl2/*sasldb*.so*
@@ -264,6 +263,10 @@ getent passwd %{username} >/dev/null || useradd -r -g %{username} -d %{homedir}
 
 
 %changelog
+* Wed Oct 22 2025 yixiangzhike <yixiangzhike007@163.com> - 2.1.28-8
+- make socketdir and mech on the command line configurable
+- cleanup warning "File listed twice" when building
+
 * Tue Oct 14 2025 yixiangzhike <yixiangzhike007@163.com> - 2.1.28-7
 - fix saslpasswd2 coredump when enable srp-setpass
 
diff --git a/saslauthd.service b/saslauthd.service
index 436c8358ab69d6e797b1952ce76fcc65cd54775d..8531559e31027148f68386143e829efd54ce660a 100644
--- a/saslauthd.service
+++ b/saslauthd.service
@@ -4,7 +4,7 @@ Description=SASL authentication daemon.
 [Service]
 Type=forking
 EnvironmentFile=/etc/sysconfig/saslauthd
-ExecStart=/usr/sbin/saslauthd -m /run/saslauthd -a pam $FLAGS
+ExecStart=/usr/sbin/saslauthd -m $SOCKETDIR -a $MECH $FLAGS
 RuntimeDirectory=saslauthd
 Restart=always
 RestartSec=1s
diff --git a/saslauthd.sysconfig b/saslauthd.sysconfig
index c5d8db636c4797d6a0707f5585369f9324a11222..7ee7b79ff710817bc5276353e86de83d171c3545 100644
--- a/saslauthd.sysconfig
+++ b/saslauthd.sysconfig
@@ -1 +1,8 @@
+# Saslauthd's homedir for socket file, pid file and so on.
+SOCKETDIR=/run/saslauthd
+
+# Which mechanism to use.
+MECH=pam
+
+# Additional flags for saslauthd command line.
 FLAGS=