auth: Expose auth_request_verify_plain_callback_finish

auth: Support secured=tls

auth: Fix 'Password mismatch' casing consistency

auth: cache: don't log password mismatch twice If auth cache is enabled and the last auth was successful dovecot assumes the password has been changed and invalidates the cache which results in double logging of the same password mismatch. This also applies to expired negative cache entries.

auth: Added auth_request_log_login_failure() New function implementing functionality of auth_request_log_unknown_user() and auth_request_log_password_mismatch()

auth: Add username_filter for passdb block username_filter lets you specify one or more pattern(s) for including or excluding users. exclusion patterns are denoted with ! prefix. if any exclude matches the username, passdb will be skipped. if any inclusions is specified, and the username does not match one of them, passdb will be skipped.

auth: Accept client_id from auth client Client ID contains the ID client request string for IMAP.

auth: Auth workers shouldn't return username if it wasn't changed This continues the previous fix where username was always added to passdb/userdb cache, even if the username wasn't changed. That could have resulted in wrongly changing usernames if the cache key didn't uniquely identify the user.

global: Change string position/length from unsigned int to size_t Mainly to avoid truncating >4GB strings, which might potentially cause some security holes. Normally there are other limits, which prevent such excessive strings from being created in the first place. I'm sure this didn't find everything. Maybe everything could be found with compiler warnings. -Wconversion kind of does it, but it gives way too many unnecessary warnings. These were mainly found with: grep " = strlen" egrep "unsigned int.*(size|len)"

auth: Pass local_name to auth-request This allows using local_name in various places, such as passdb/userdb queries.

auth: Don't re-insert userdb results from auth cache data back to cache. This was also breaking TTLs for the cached userdb results, because each re-insert reset the TTL.

auth: Added delay_until passdb extra field.

auth-policy: Hook auth policy to auth code

auth-policy: Add policy implementation

global: unsigned int:1 -> bool:1 perl -i -pe 's/unsigned int ([^,:;]+):1;/bool $1:1;/' **/*.[ch]

auth: If auth request contains "debug" field, enable auth_debug=yes for the request.

auth: If auth_stats=yes, send statistics to stats process.

Changed type of internet port values to in_port_t everywhere. Created special SET_IN_PORT setting type for internet port values. Created net_str2port() for parsing internet port values. Removed several atoi() invocations in the process.

auth: Moved var_expand() related code to its own file.

auth: Changed passdb { continue-ok } handling for credentials lookups. If the last passdb after it doesn't return credentials, use the first passdb's credentials. This allows implementing plugins that modify the passdb result without actually changing the credentials.

auth: Added %{orig_user}, %{orig_username} and %{orig_domain} variables

auth: Fixed userdb extra fields handling in passdb failure. userdb prefetch -flag wasn't correctly set, causing the prefetch userdb in some situations incorrectly either to be called or not be called. This also fixes a crash when using userdb static and multiple passdbs. The userdb_reply was set to NULL, which caused a crash later.

auth: Use special AUTH_SUBSYS_DB/MECH parameters as auth_request_log*() subsystem. This avoids hardcoded strings all over the place and also allows assigning the correct passdb/userdb name for log messages generated by generic passdb/userdb code, which doesn't know exactly where it was called from.

auth: Previous userdb changes caused userdb prefetch to be used always.

auth: Added userdb result_success/failure/tempfail and skip settings, similar to passdb's.

auth: Added %{session_pid} variable for userdb lookups in login requests. session_pid is now always sent to auth process. A new request_auth_token parameter was added to specify if auth_token should be returned or not.

auth: Cache master user logins also.

auth: Use a common auth_request_log_unknown_user() for logging "unknown user" entries.

Minor change to prevent invalid code changes.

auth: Added %{domain_first} and %{domain_last} variables. They are both equal to %d normally, but differ when there are multiple '@' characters in the domain.

auth: With multiple passdbs the previous passdb's userdb_* fields weren't cleared.

auth: If blocking passdb returned only NULLs for userdb_ fields, use userdb prefetch anyway.

auth: If passdb sql returned only NULLs for userdb_ fields, use userdb prefetch anyway.

auth: Added real_[lr]ip, real_[lr]port variables. The unreal ones differ when a trusted proxy overrides them.

auth: Added passdb { result_* and skip } settings. passdb { skip = never | authenticated | unauthenticated } can be used to skip over a passdb lookup based on previous passdb lookups. passdb { result_success, result_failure, result_internalfail } can be used to specify what to do on those conditions. Choices as continue, continue-ok, continue-fail, return, return-ok, return-fail. The -ok and -fail variants update the current "success" flag, while continue/return uses the current flag. The authentication succeeds only if the success flag is set after the last lookup. The continue variants continue to the next passdb, while return variants finish the lookup immediately.

auth: Cleaned up flags in auth request. Removed those that already exist in extra_fields. It's now slightly slower to check for those flags in extra_fields, but it's going to be easier to make commit/rollback feature to extra_fields.

auth: Code cleanup: Renamed auth-stream to auth-fields.

auth: Code cleanup: Merged extra_cache_fields into extra_fields. They are separated using a hidden-flag in the extra field. This required a new implementation for auth-streams.

auth: Code cleanup: Avoid using auth_stream_reply as temporary strings.

auth: Code cleanup: Removed unnecessary userdb_ prefix checks. The userdb_ fields are nowadays placed to userdb_reply immediately.

auth: Code cleanup: Removed unnecessary auth_stream_reply usage from auth-worker communication.

Renamed network.[ch] to net.[ch]. The function prefixes already started with net_ instead of network_. And icecap wants to use network.h for other purpose. :)

ldap auth: Update %variables after each field update. The previous behavior was a bit confusing. "uid=user" at the beginning updated the %u variable, but if it was after templates it didn't update it. Also "=user=%{uid}" that was supposed to be equivalent wasn't. Now the behavior is consistent across all ways to set the fields.

auth: Don't add proxy/pass fields when we're only authenticating (not logging in). For example SMTP server doesn't need these fields when doing SMTP AUTH.

Added support to perform token-based service process authentication. Creates hidden SASL method DOVECOT-TOKEN. This method is not available on the normal auth login socket and thus never presented to clients. Creates new auth socket type 'tokenlogin'. This otherwise normal login socket only offers authentication using the DOVECOT-TOKEN mechanism. Creates new token-login directory in base_dir to separate token logins from normal logins. This directory is otherwise completely identical to the normal login dir, i.e. it contains sockets for the service backends, used to chroot login processes to, etc. Makes default login socket configurable. Performs some minor changes to src/login-common to build very sparse protocols, e.g. avoid the need to implement methods that are not needed.

auth: Added CACHE-FLUSH command to flush some/all users from auth cache.

Marked functions parameters that are allowed to be NULL. Some APIs were also changed. The non-obvious APIs where NULL parameter was changed to "" are master_service_init() and auth_master_user_list_init(). These checks can currently be enabled only on a patched clang: http://llvm.org/bugs/show_bug.cgi?id=6786

auth: If user is disabled or password expired, tell about it to auth-client.

auth: Include session ID in log line prefix.

Compiler warning fixes.

auth: Fixed auth cache key generation to support %{long} variables

checkpassword: Escape transferred extra fields properly.

lib-dns: dns_lookup() returns now the lookup struct, and it can be aborted. Changed all dns_lookup() users also to abort the lookup when needed (previously it probably would have just accessed freed memory and crash).

auth: Added proxy_always extra field. When used with proxy_maybe, it can be used to redirect "local" users to local backends via director.

auth: Added proxy_always extra field. When used with proxy_maybe, it can be used to redirect "local" users to local backends via director.

auth: Handle proxy_maybe=yes with host=hostname properly.

auth: Handle proxy_maybe=yes with host=hostname properly.

auth: If client gives "final-resp-ok" parameter, send it in OK reply with DIGEST-MD5, SCRAM-SHA-1

auth: Don't allow auth clients to set internal auth request fields. This could have allowed attacker to bypass authentication if login process was first successfully attacked to allow arbitrary code execution.

auth: Allow clients to specify that they want to skip auth penalty check. This is "safe", because the clients specify the IP for the penalty check anyway.

auth: Log a warning if ldap attribute has unexpectedly multiple values.

auth: passdb credentials lookup fix when using multiple passdbs. If at least one passdb returns "user unknown" and the last passdb returns "credential lookup not supported", the proper return value is still "user unknown".

auth: Avoid crashing when finishing failed requests that already timed out.

auth: Changed how auth deinitilization works. --HG-- branch : HEAD

auth: Removed unnecessary auth_request callback and context uses. --HG-- branch : HEAD

auth: Fixes to destroying pending async userdb requests at deinit. --HG-- branch : HEAD

auth: Minor code fix/cleanup. --HG-- branch : HEAD

auth: If verbose_proctitle=yes, show auth request counts in ps. - wait: waiting for auth client to do something (either continue multistep auth mechanism or issue master request for a finished auth) - passdb: waiting for passdb lookup to finish - userdb: waiting for userdb lookup to finish --HG-- branch : HEAD

auth: Initial support for per-protocol auth settings. Currently the list of services is hard-coded. This should be changed so that config lookup returns the service names. --HG-- branch : HEAD

auth: Don't loop through active requests every 5 seconds, looking for timeouts. --HG-- branch : HEAD

Added auth_verbose_passwords = no|plain|sha1. --HG-- branch : HEAD

auth: Added auth failure penalty tracking based on remote IP address. --HG-- branch : HEAD

DIGEST-MD5: Fixed authentication with user@domain usernames. --HG-- branch : HEAD

auth workers: Return plaintext credentials to parent process if possible, so it gets cached instead of some other scheme. --HG-- branch : HEAD

Added %k variable to display valid-client-cert status. It expands to "valid" or empty. --HG-- branch : HEAD

auth: %m variable didn't work with blocking passdbs --HG-- branch : HEAD

Use auth-stream API to build all TAB-delimited strings to make sure strings are escaped properly where necessary. --HG-- branch : HEAD

If proxy user has a password and authentication fails, don't return the proxy fields to client. --HG-- branch : HEAD

Added "proxy_maybe" field. If it's used instead of "proxy" and the proxy destination matches the current connection, the user is logged in normally instead of the login failing with "Proxying loops". --HG-- branch : HEAD

Auth cache didn't work for usernames that got translated internally. --HG-- branch : HEAD

Don't keep master username in original_username. --HG-- branch : HEAD

Renamed __attr_*__ to ATTR_*. Renamed __attrs_used__ to ATTRS_DEFINED. --HG-- branch : HEAD

Changed .h ifdef/defines to use <NAME>_H format. --HG-- branch : HEAD

Send local/remote ports to dovecot-auth. They're now in %a and %b variables. --HG-- branch : HEAD

Changed userdb callback API. Don't require uid/gid to be returned by userdb. --HG-- branch : HEAD

Further const'ification of struct mech_module. --HG-- branch : HEAD

All password schemes can now be encoded with base64 or hex. The encoding is ".b64", ".base64" or ".hex" suffix in the scheme, eg. {plain.b64}. Password scheme verification function can now be set to NULL, in which case the verification is done by generating a new crypted password from given plaintext password and comparing it. --HG-- branch : HEAD

Removed enum passdb_credentials. Use scheme strings directly instead. This makes it possible to implement new mechanisms in plugins. --HG-- branch : HEAD

Changed auth_request->created to last_access and update it a bit more often. If there are slow authentications this could help avoid removing timeouted auth requests too early. --HG-- branch : HEAD

Reverted accidental commit. This code isn't ready yet. --HG-- branch : HEAD

Moved all storage destruction code to mail-storage.c and made destroy() optional. Removed set_callbacks(). Made autodetect() optional. --HG-- branch : HEAD

Added %c variable which expands to "secured" with SSL/TLS/localhost. --HG-- branch : HEAD

Added auth_request_set_fields() and used it instead of duplicating the code in multiple places. --HG-- branch : HEAD

Special extra_fields weren't saved to auth cache. This was especially problematic for allow_nets which was ignored if the user was already in cache. --HG-- branch : HEAD

Authentication cache caches now also userdb data. Code by Tommi Saviranta. --HG-- branch : HEAD

We treated internal userdb lookup errors as "user unknown" errors. In such situations this caused deliver to think the user didn't exist and the mail get bounced. --HG-- branch : HEAD

Added auth_request_set_credentials() to modify credentials in passdb and implemented it for SQL passdb. Added passdb_need_set_credentials boolean to mechanisms to indicate that it's required (OTP will need it). Patch by Andrey Panin. --HG-- branch : HEAD

Escape SQL strings using sql_escape_string(). Fixes the problems with PostgreSQL. --HG-- branch : HEAD

Added "allow_nets" extra field. If set, the user can log in only from within the given networks (hope the code is correct...) --HG-- branch : HEAD

Digest-MD5 logins didn't work if passdb changed username. --HG-- branch : HEAD

Added comment --HG-- branch : HEAD

Added support for "master users" who can log in as other people. Currently works only with SASL PLAIN authentication by giving it authorization ID string. --HG-- branch : HEAD

Added auth_debug_passwords setting. If it's not enabled, hide all password strings from logs. --HG-- branch : HEAD

deinit, unref, destroy, close, free, etc. functions now take a pointer to their data pointer, and set it to NULL. This makes double-frees less likely to cause security holes. --HG-- branch : HEAD

Added "bool" type and changed all ints that were used as booleans to bool. --HG-- branch : HEAD

If passdb returned NULL password (ie. no password needed), it wasn't cached correctly. --HG-- branch : HEAD

Added ssl_username_from_cert setting. Not actually tested yet.. --HG-- branch : HEAD

If passdb lookup fails with internal error, try other passdbs anyway before returning internal failure. --HG-- branch : HEAD

s/occured/occurred/ --HG-- branch : HEAD

USER auth command requires now service parameter and supports also others parameters. Fixes a crash in dovecot-auth with deliver+mysql. --HG-- branch : HEAD

Allow multiple master connections for a single listener. --HG-- branch : HEAD

Try to keep scheme always included in auth_request->passdb_password. --HG-- branch : HEAD

Handle USER requests from master connections. --HG-- branch : HEAD

Replaced userdb/passdb settings with blocks so it's possible to give multiple ones. Plaintext password mechanisms now support handling multiple passdbs, but others don't yet. Also fixed a few memory leaks. --HG-- branch : HEAD

Added state variable for auth_request and several assertions to make sure the state is always valid. Fixed assert crash when a user having cached passdb entry expired tried to authenticate. --HG-- branch : HEAD

Restructuring of auth code. Balancer auth processes were a bad idea. Usually the balancer itself took as much CPU as the actual workers because it acted as a proxy. Now auth worker means different thing: they're used to execute blocking passdb and userdb queries. Currently just MySQL (PAM and checkpassword in TODO). --HG-- branch : HEAD

Moved cache handling from sql/ldap-specific code to generic auth-request code. Did some small optimizations on the way. --HG-- branch : HEAD

userdb can now return extra parameters to master. Removed special handling of home/mail wherever possible, they're just regular extra parameters now. LDAP passdb and static userdb can return extra parameters now. --HG-- branch : HEAD

Moving code around. --HG-- branch : HEAD

Another try with API cleanup. --HG-- branch : HEAD

API cleanup --HG-- branch : HEAD

Added auth_request_log_*(). --HG-- branch : HEAD

Cleanups. --HG-- branch : HEAD

Reorganized the code to have less global/static variables. --HG-- branch : HEAD

Split auth_request* functions from mech.c to auth-request.c --HG-- branch : HEAD