auth: Add policy check configuration options Allows disabling before/after auth checks, or reporting.

auth: passdb-cache - Verify credentials with worker when enabled

auth: Add username_filter for passdb block username_filter lets you specify one or more pattern(s) for including or excluding users. exclusion patterns are denoted with ! prefix. if any exclude matches the username, passdb will be skipped. if any inclusions is specified, and the username does not match one of them, passdb will be skipped.

auth: Add mechanism filter for passdbs

auth-policy: Add missing settings

auth: userdb passwd iteration now skips users not in first/last_valid_gid range Patch by Michal Hlavinka / Red Hat

auth-policy: Add policy implementation

auth: Added passdb/userdb { auth_verbose } setting. If this is explicitly set to yes or no, it overrides the global auth_verbose setting. However, auth_debug=yes overrides all of the auth_verbose settings.

auth: If auth_stats=yes, send statistics to stats process.

auth: If passdb/userdb has a name, use it for the log prefix instead of the driver name.

auth: Added userdb result_success/failure/tempfail and skip settings, similar to passdb's.

auth: first/last_valid_uid settings shouldn't have had auth_ prefix.

auth: Added passdb { result_* and skip } settings. passdb { skip = never | authenticated | unauthenticated } can be used to skip over a passdb lookup based on previous passdb lookups. passdb { result_success, result_failure, result_internalfail } can be used to specify what to do on those conditions. Choices as continue, continue-ok, continue-fail, return, return-ok, return-fail. The -ok and -fail variants update the current "success" flag, while continue/return uses the current flag. The authentication succeeds only if the success flag is set after the last lookup. The continue variants continue to the next passdb, while return variants finish the lookup immediately.

Array API changed: ARRAY_DEFINE(name, type) -> ARRAY(type) name Easy way to update your existing code: perl -i -pe 's:ARRAY_DEFINE\(([^,]+), *([^)]+)\);:ARRAY($2) $1;:' **/*.[ch]

Marked functions parameters that are allowed to be NULL. Some APIs were also changed. The non-obvious APIs where NULL parameter was changed to "" are master_service_init() and auth_master_user_list_init(). These checks can currently be enabled only on a patched clang: http://llvm.org/bugs/show_bug.cgi?id=6786

auth: Added auth_proxy_self setting to specify IPs that are considered as "self" for proxy_maybe.

auth: Added auth_proxy_self setting to specify IPs that are considered as "self" for proxy_maybe.

auth: Added passdb imap plugin.

auth: Added default_fields and override_fields settings to all passdbs and userdbs.

auth: userdb passwd iteration now lists only users within first_valid_uid..last_valid_uid range.

auth: If verbose_proctitle=yes, show auth request counts in ps. - wait: waiting for auth client to do something (either continue multistep auth mechanism or issue master request for a finished auth) - passdb: waiting for passdb lookup to finish - userdb: waiting for userdb lookup to finish --HG-- branch : HEAD

auth: Fixed support for per-service auth settings. --HG-- branch : HEAD

auth: Initial support for per-protocol auth settings. Currently the list of services is hard-coded. This should be changed so that config lookup returns the service names. --HG-- branch : HEAD

auth: auth_userdb and auth_passdb no longer has pointer to struct auth. --HG-- branch : HEAD

auth: Moved some variables generated from settings to struct auth_settings. --HG-- branch : HEAD

Added auth_verbose_passwords = no|plain|sha1. --HG-- branch : HEAD

Added "size" setting type, which supports B/k/M/G/T suffixes. --HG-- branch : HEAD

config: Removed auth sections completely for now. They might come back in some other more generic form. --HG-- branch : HEAD

Initial commit for v2.0 master rewrite. Several features are still missing. --HG-- branch : HEAD

Initial commit for config rewrite. --HG-- branch : HEAD