6aafdd81aa1e12c127941c1ebd87e8ee4697ec3e |
|
11-Mar-2016 |
Timo Sirainen <timo.sirainen@dovecot.fi> |
auth: Code cleanup - avoid using void *context
auth_request_callback_t always uses struct auth_client/master_connection*
in the context - no need to try to be too generic here. |
eb7b8855cc45292334056f425645215e348ec493 |
|
30-Jan-2013 |
Timo Sirainen <tss@iki.fi> |
auth: Code cleanup: Avoid using auth_stream_reply as temporary strings. |
ab90f702ceedb7ba445a9a592be0b213b27cbafa |
|
14-Sep-2012 |
Stephan Bosch <stephan@rename-it.nl> |
Added support to perform token-based service process authentication.
Creates hidden SASL method DOVECOT-TOKEN. This method is not available on
the normal auth login socket and thus never presented to clients.
Creates new auth socket type 'tokenlogin'. This otherwise normal login
socket only offers authentication using the DOVECOT-TOKEN mechanism.
Creates new token-login directory in base_dir to separate token logins from
normal logins. This directory is otherwise completely identical to the
normal login dir, i.e. it contains sockets for the service backends, used
to chroot login processes to, etc.
Makes default login socket configurable.
Performs some minor changes to src/login-common to build very sparse
protocols, e.g. avoid the need to implement methods that are not needed. |
27a44fcfd8d19bffe0f267f20a2b5d3fe7600fdd |
|
19-Aug-2012 |
Timo Sirainen <tss@iki.fi> |
Removed CONTEXT_TYPE_SAFETY macro and reimplemented its functionality better.
gcc/clang now gives a compiler error in many places if callback isn't
exactly what was expected. It's also now much easier to add more of these
checks. |
a7e2c98560cf54dc656711a237cb07da8a5a9ee4 |
|
18-Nov-2011 |
Timo Sirainen <tss@iki.fi> |
auth: Log a warning if auth client disconnects while it still has pending requests. |
5363f51ad46344f4e5952f2fef211a7cf8f95ddc |
|
30-Sep-2010 |
Timo Sirainen <tss@iki.fi> |
auth: Don't assert-crash if a request still succeeds after its client connection is gone. |
9d75363d3fbabc2fbc2d80f06672e3ed8965804a |
|
08-Jun-2010 |
Timo Sirainen <tss@iki.fi> |
auth: Changed how auth deinitilization works.
--HG--
branch : HEAD |
50782de8a9d5ebe11ee61496b4e695a1d3875230 |
|
08-Jun-2010 |
Timo Sirainen <tss@iki.fi> |
auth: Removed unnecessary auth_request callback and context uses.
--HG--
branch : HEAD |
0602c7dee8ceda2d7c7e5723f18c56698ac5a76d |
|
02-Jun-2010 |
Timo Sirainen <tss@iki.fi> |
auth: Fixes to destroying pending async userdb requests at deinit.
--HG--
branch : HEAD |
fbee9bffb56d882b98146dd0de76a5bcccc2bdc3 |
|
01-Jun-2010 |
Timo Sirainen <tss@iki.fi> |
auth: Aborting pending async requests on deinit caused crashes.
--HG--
branch : HEAD |
3b8d05391336c0e4d24c8ddcc962f350409ffbd3 |
|
20-May-2010 |
Timo Sirainen <tss@iki.fi> |
login: Tell auth process to free aborted auth requests.
--HG--
branch : HEAD |
daa7e7459749ae8f82cd3eed9c44522d81c609a3 |
|
12-May-2010 |
Timo Sirainen <tss@iki.fi> |
auth: Separate auth and login connections. Non-login requests are freed immediately after auth finished.
The login connections are used by Dovecot internally, while the auth
connections are for SMTP AUTH etc.
--HG--
branch : HEAD |
9ed2951bd0bb1878a27437d7c00611b2baadd614 |
|
13-Mar-2010 |
Timo Sirainen <tss@iki.fi> |
auth: Initial support for per-protocol auth settings.
Currently the list of services is hard-coded. This should be changed so that
config lookup returns the service names.
--HG--
branch : HEAD |
9be4e6701d086c009f3db1913a148139ea180420 |
|
13-Mar-2010 |
Timo Sirainen <tss@iki.fi> |
auth: Auth request handler no longer keeps struct auth pointer.
--HG--
branch : HEAD |
48ac75465ae154b1d705f18de6d95045ab714b65 |
|
19-Feb-2010 |
Timo Sirainen <tss@iki.fi> |
auth: Don't loop through active requests every 5 seconds, looking for timeouts.
--HG--
branch : HEAD |
226259ee6fb9830dafc1a5ba1e95bf5a4345b406 |
|
08-Mar-2008 |
Timo Sirainen <tss@iki.fi> |
Use auth-stream API to build all TAB-delimited strings to make sure strings
are escaped properly where necessary.
--HG--
branch : HEAD |
2872c818f9c6704609f4d67d984b033a63e3a108 |
|
01-Jan-2008 |
Timo Sirainen <tss@iki.fi> |
Make sure failed auth requests stay in failure buffer for at least a second.
--HG--
branch : HEAD |
c25356d5978632df6203437e1953bcb29e0c736f |
|
16-Sep-2007 |
Timo Sirainen <tss@iki.fi> |
Changed .h ifdef/defines to use <NAME>_H format.
--HG--
branch : HEAD |
00efa7d99981e18e286c02b18c1163dde18ee521 |
|
15-Dec-2006 |
Timo Sirainen <tss@iki.fi> |
Type safe callbacks weren't as easy as I thought. Only callback(void
*context) can be handled generically. Others can be handled specially, but
only if all the parameters are pointers, otherwise eg. int parameter can be
replaced with long without compiler giving any warnings.
--HG--
branch : HEAD |
59151b71059df1190acd75d8717ed04a7920c862 |
|
15-Dec-2006 |
Timo Sirainen <tss@iki.fi> |
Added context parameter type safety checks for most callback APIs.
--HG--
branch : HEAD |
d5cebe7f98e63d4e2822863ef2faa4971e8b3a5d |
|
14-Jan-2006 |
Timo Sirainen <tss@iki.fi> |
deinit, unref, destroy, close, free, etc. functions now take a pointer to
their data pointer, and set it to NULL. This makes double-frees less likely
to cause security holes.
--HG--
branch : HEAD |
6ef7e31619edfaa17ed044b45861d106a86191ef |
|
13-Jan-2006 |
Timo Sirainen <tss@iki.fi> |
Added "bool" type and changed all ints that were used as booleans to bool.
--HG--
branch : HEAD |
9b62bbaf33d4516b5dffb36c3ea32ce217e7fbb1 |
|
28-Jul-2005 |
Timo Sirainen <tss@iki.fi> |
Removed unused code
--HG--
branch : HEAD |
ad49932dae8ba31e07544b66bbc4f4de707a751c |
|
19-Apr-2005 |
Timo Sirainen <tss@iki.fi> |
Allow multiple master connections for a single listener.
--HG--
branch : HEAD |
66d2db642fe24d555d113ba463e446b038d476ef |
|
28-Feb-2005 |
Timo Sirainen <tss@iki.fi> |
Restructuring of auth code. Balancer auth processes were a bad idea. Usually
the balancer itself took as much CPU as the actual workers because it acted
as a proxy.
Now auth worker means different thing: they're used to execute blocking
passdb and userdb queries. Currently just MySQL (PAM and checkpassword in
TODO).
--HG--
branch : HEAD |
70905e51a5148bd5613cb04720807177474a2496 |
|
09-Jan-2005 |
Timo Sirainen <tss@iki.fi> |
Changed the way multiple auth processes are handled. It no longer uses a pid
appended to socket name but instead there's a balancer process which
proxies the requests to worker processes.
--HG--
branch : HEAD |
657afb33796f8216c568ad813627da89970760be |
|
09-Jan-2005 |
Timo Sirainen <tss@iki.fi> |
Moving code around.
--HG--
branch : HEAD |