dc3ee76ef7907b1a9fc61975fdeedb422853ce50 |
|
18-Jan-2018 |
Aki Tuomi <aki.tuomi@dovecot.fi> |
auth-worker: Support PASSW request
This will attempt to verify given credentials. |
50168536f8d04626d71860c73b2efc18d407d083 |
|
18-Jan-2018 |
Aki Tuomi <aki.tuomi@dovecot.fi> |
auth-worker: Add auth_worker_auth_request_new
Replaces worker_auth_request_new, moves in
check for username and service. Simplifies code. |
bcb4e51a409d94ae670de96afb8483a4f7855294 |
|
01-Jan-2018 |
Stephan Bosch <stephan.bosch@dovecot.fi> |
Updated copyright notices to include the year 2018. |
d1ba8ecbb936ace90179d2292952546708d68f71 |
|
30-Oct-2017 |
Timo Sirainen <timo.sirainen@dovecot.fi> |
global: Replace o_stream_nfinish() with o_stream_flush() |
0d1b8b6bec79746c5d89d57dd8c1688946bd9237 |
|
19-Sep-2017 |
Josef 'Jeff' Sipek <jeff.sipek@dovecot.fi> |
global: start relying on timeout_remove(NULL) being a no-op
Cleanup performed with the following semantic patch:
@@
expression E;
@@
- if (E != NULL) {
- timeout_remove(&E);
- }
+ timeout_remove(&E); |
5f1d689131a75c39f064cbd4202373e7edf78f18 |
|
19-Sep-2017 |
Josef 'Jeff' Sipek <jeff.sipek@dovecot.fi> |
global: start relying on io_remove{,_closed}(NULL) being a no-op
Cleanup performed with the following semantic patch:
@@
expression E;
@@
- if (E != NULL) {
- io_remove(&E);
- }
+ io_remove(&E);
@@
expression E;
@@
- if (E != NULL) {
- io_remove_closed(&E);
- }
+ io_remove_closed(&E); |
865a82c1e9bba11609835a36674964649025bf77 |
|
16-Mar-2017 |
Timo Sirainen <timo.sirainen@dovecot.fi> |
auth: Auth workers shouldn't return username if it wasn't changed
This continues the previous fix where username was always added to
passdb/userdb cache, even if the username wasn't changed. That could have
resulted in wrongly changing usernames if the cache key didn't uniquely
identify the user. |
e0a84bcd487b05872da59781452168609b5c1f2c |
|
16-Mar-2017 |
Timo Sirainen <timo.sirainen@dovecot.fi> |
auth: passdb/userdb lookups via auth-worker cached too much of the replies
Only the fields returned by the lookup itself were supposed to be cached.
This was especially problematic if the lookup via auth-worker didn't
uniquely identify the user. For example doing a passdb lookup for an
attribute shared by multiple users could have caused the reply to contain
the previous cached user's all extra fields. |
2454dfa32c93c20a8522c6ed42fe057baaac9f9a |
|
01-Jan-2017 |
Stephan Bosch <stephan.bosch@dovecot.fi> |
Updated copyright notices to include the year 2017. |
026d971be5201aed5ccf60138900770e42cf0de5 |
|
27-Oct-2016 |
Timo Sirainen <timo.sirainen@dovecot.fi> |
auth-worker: Fix potential crash when importing passdb/userdb fields without value.
These were being converted to NULL values in auth-worker, while elsewhere they were
converted to "". Changed to "" here as well and added asserts to make sure they
won't happen again.
Most of the NULL values would have been fine, but overriding any IP/port
fields would have caused a crash when trying to parse the value. |
4b1781e4c64be52e25b5994e5242dbe696cc7d29 |
|
20-Oct-2016 |
Timo Sirainen <timo.sirainen@dovecot.fi> |
global: Use i_strchr_to_next() wherever useful. |
3bfdab77880db25dbdc8bf48c2cfc2d50b98e426 |
|
12-Oct-2016 |
Aki Tuomi <aki.tuomi@dovecot.fi> |
auth: Pass userdb fields to worker
If this is not done, then those userdb handlers
that need access to userdb variables for e.g.
interpolation, cannot access them. |
6dd436dbf05c6c96fc4b6873bb9b44ede860edd7 |
|
26-Jul-2016 |
Timo Sirainen <timo.sirainen@dovecot.fi> |
auth: Set userdb_lookup flag correctly for blocking userdb lookups.
This caused at least userdb-related logging to log the passdb instead. |
6e5a4cdf7ef123589e2409e0012b1024c97957d5 |
|
11-Jul-2016 |
Aki Tuomi <aki.tuomi@dovecot.fi> |
auth: Skip authentication with noauthenticate |
0dffa25d211be541ee3c953b23566a1a990789df |
|
06-Jun-2016 |
Timo Sirainen <timo.sirainen@dovecot.fi> |
global: unsigned int:1 -> bool:1
perl -i -pe 's/unsigned int ([^,:;]+):1;/bool $1:1;/' **/*.[ch] |
e93184a9055c2530366dfe617e07199603c399dd |
|
06-Jun-2016 |
Martti Rannanjärvi <martti.rannanjarvi@dovecot.fi> |
lib: remove autoclose parameter from [io]_stream_create_fd
Use [io]_stream_create_fd_autoclose() for autoclose. |
02c335c23bf5fa225a467c19f2c063fb0dc7b8c3 |
|
12-Jan-2016 |
Timo Sirainen <timo.sirainen@dovecot.fi> |
global: freshen copyright
git ls-files | xargs perl -p -i -e 's/(\d+)-201[0-5]/$1-2016/g;s/ (201[0-5]) Dovecot/ $1-2016 Dovecot/' |
75b4cc30566e22675b9e7b19b15a7fd929d8f54c |
|
23-Oct-2015 |
Timo Sirainen <tss@iki.fi> |
auth: Fixed userdb changing username via auth-worker |
814bf67459ad405a157af0b8940602024d7fadfe |
|
23-Sep-2015 |
Teemu Huovila <teemu.huovila@dovecot.fi> |
Remove now-unnecessary direct stdlib.h #includes. |
f0ecd925c7feb815c4b9acf84772fcd56c02319b |
|
07-May-2015 |
Timo Sirainen <tss@iki.fi> |
auth: Added assert to make sure previous change is correct. |
3db05c8c00faca6ab9ac8391e1d6977365f4d1b3 |
|
07-May-2015 |
Timo Sirainen <tss@iki.fi> |
auth: Fixed credentials lookups via auth-workers when no actual password was returned.
For example LDAP lookup with auth_bind=yes should still return any extra
fields. |
7cb128dc4cae2a03a742f63ba7afee23c78e3af0 |
|
05-Jan-2015 |
Phil Carmody <phil@dovecot.fi> |
global: freshen copyright
Robomatically:
git ls-files | xargs perl -p -i -e 's/(\d+)-201[0-4]/$1-2015/g;s/ (201[0-4]) Dovecot/ $1-2015 Dovecot/'
Happy 2015 everyone!
Signed-off-by: Phil Carmody <phil@dovecot.fi> |
d6bffcdf187c155dccc04fb4267b4f82ce59347d |
|
11-Mar-2014 |
Timo Sirainen <tss@iki.fi> |
auth worker: Log a warning if master disconnects us while handling a long request. |
c0757c70cfd2c9b44de3504b753a4d2f38690ef0 |
|
11-Mar-2014 |
Timo Sirainen <tss@iki.fi> |
auth worker: Log a warning if master disconnects us while handling a long request. |
a8c5a86d183db25a57bf193c06b41e092ec2e151 |
|
04-Feb-2014 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2014. |
cd75c360f244c96b9ee10e01ee3a66fad13183c8 |
|
08-Dec-2013 |
Timo Sirainen <tss@iki.fi> |
auth: Added userdb result_success/failure/tempfail and skip settings, similar to passdb's. |
a355fad576bc0c95b11161cf48b48d343229a2b3 |
|
03-Nov-2013 |
Timo Sirainen <tss@iki.fi> |
auth-worker: Potential crashfix at deinit |
5afc76d0215c5f7631dec06ef864d59f0686a0a8 |
|
21-Sep-2013 |
Timo Sirainen <tss@iki.fi> |
auth: Fixed user iteration hang due to earlier stream corking changes.
Also fixed process title updating for auth-worker process during LIST. |
a138ac12134564b151f00fdef86fba9cd9ba8af0 |
|
12-Jul-2013 |
Timo Sirainen <tss@iki.fi> |
auth: If blocking passdb returned only NULLs for userdb_ fields, use userdb prefetch anyway. |
1ce47e48d7231da6f18f02eab6bab6451b4ef12a |
|
12-Jul-2013 |
Timo Sirainen <tss@iki.fi> |
auth: Use fewer syscalls for sending user list. |
3340fc9aeaa655dc3bb8f329ebdfcb38a5121949 |
|
12-Jul-2013 |
Timo Sirainen <tss@iki.fi> |
auth: Avoid wasting data stack when iterating users. |
5a580c3a38ced62d4bcc95b8ac7c4f2935b5d294 |
|
02-Feb-2013 |
Timo Sirainen <tss@iki.fi> |
Oops :) Update copyrights to 2013 without breaking all .c files. |
cca4ba2a504d70a9fe9fee37f8433997359de52c |
|
02-Feb-2013 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2013. |
559f278a4c54d9fa7e0f2e96ebceda30562f9009 |
|
30-Jan-2013 |
Timo Sirainen <tss@iki.fi> |
auth: Added passdb { result_* and skip } settings.
passdb { skip = never | authenticated | unauthenticated } can be used to
skip over a passdb lookup based on previous passdb lookups.
passdb { result_success, result_failure, result_internalfail } can be used
to specify what to do on those conditions. Choices as continue,
continue-ok, continue-fail, return, return-ok, return-fail. The -ok and
-fail variants update the current "success" flag, while continue/return uses
the current flag. The authentication succeeds only if the success flag is
set after the last lookup. The continue variants continue to the next
passdb, while return variants finish the lookup immediately. |
83d2e37f065eabe38dc92db485c5ca39ee43ce05 |
|
30-Jan-2013 |
Timo Sirainen <tss@iki.fi> |
auth: Auth requests' flag fields were never passed to worker processes. |
31633d676642b83305b8d46da495d9bb4e2d1ff8 |
|
30-Jan-2013 |
Timo Sirainen <tss@iki.fi> |
auth: Cleaned up flags in auth request. Removed those that already exist in extra_fields.
It's now slightly slower to check for those flags in extra_fields, but it's
going to be easier to make commit/rollback feature to extra_fields. |
ee6df9526e9716b3f1734d85b566e00fc41208bc |
|
30-Jan-2013 |
Timo Sirainen <tss@iki.fi> |
auth: Code cleanup: Renamed auth-stream to auth-fields. |
2f35a2fbe2c525380487464fad7cf85f16e0dded |
|
30-Jan-2013 |
Timo Sirainen <tss@iki.fi> |
auth: Code cleanup: Merged extra_cache_fields into extra_fields.
They are separated using a hidden-flag in the extra field. This required a
new implementation for auth-streams. |
b0e9375a1ff97c9c7d40655922af5ccc73ecaa76 |
|
30-Jan-2013 |
Timo Sirainen <tss@iki.fi> |
auth: Code cleanup: Removed unnecessary auth_stream_reply usage from auth-worker communication. |
bdd36cfdba3ff66d25570a9ff568d69e1eb543cf |
|
03-Oct-2012 |
Timo Sirainen <tss@iki.fi> |
Renamed network.[ch] to net.[ch].
The function prefixes already started with net_ instead of network_.
And icecap wants to use network.h for other purpose. :) |
e2a88d59c0d47d63ce1ad5b1fd95e487124a3fd4 |
|
24-Jun-2012 |
Timo Sirainen <tss@iki.fi> |
Added o_stream_nsend*() and related functions to make delayed error handling safer.
Once o_stream_nsend*() is called, o_stream_nfinish() must be called before
stream is destroyed to finish checking if there were any errors. If
something failed and the stream is just wanted to be closed,
o_stream_ignore_last_errors() can be called.
For streams where errors don't really make any difference (network sockets)
you can call o_stream_set_no_error_handling() immediately after creating the
stream. |
3c296d819c54e21ce05c3d2eeeedc79be42ac593 |
|
19-Apr-2012 |
Timo Sirainen <tss@iki.fi> |
Use t_strsplit_tab() wherever possible |
02967c39a2f4922fe433718e0f9ef0e6031c432b |
|
27-Feb-2012 |
Timo Sirainen <tss@iki.fi> |
auth worker: reset idle time after running a command, not before. |
12d38e76ba7f70d6219c89ec7416fea0d5de7e02 |
|
27-Feb-2012 |
Timo Sirainen <tss@iki.fi> |
auth worker: When idle_kill timeout is reached, change process title to indicate it. |
5f5870385cff47efd2f58e7892f251cf13761528 |
|
12-Feb-2012 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2012. |
3a7113e3e2dac0e333e1a3f62af7d682896f59c6 |
|
20-Jan-2012 |
Timo Sirainen <tss@iki.fi> |
auth: Make idle_kill work with auth worker processes. |
f93c833d644ecff0b0f80bee4f1cdde3e697b5c8 |
|
19-Jan-2012 |
Timo Sirainen <tss@iki.fi> |
auth: Throttle SQL auth worker process creation if they can't connect to database. |
b624773984e35dd894db8dff976c1a2114c70782 |
|
19-Jan-2012 |
Timo Sirainen <tss@iki.fi> |
auth: Show a better auth worker process title. |
e9371f899a3d4207a0ffd3923ea5ec7250cf5e75 |
|
23-Nov-2011 |
Timo Sirainen <tss@iki.fi> |
auth: Support passing regular %variables to sql/ldap iterate queries. |
2e37d45867d081db150ab78dad303b9077aea24f |
|
04-Mar-2011 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2011. |
183bea41fa640dc8117f3eb45ff935cd81377a84 |
|
04-Mar-2011 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2011. |
f158d9a303bb15a6848ca276c9391c7ca52e452b |
|
02-Jun-2010 |
Timo Sirainen <tss@iki.fi> |
Added version_string_verify() and removed code duplication with it.
--HG--
branch : HEAD |
88e9835c4d8973c62cd4db1ec7324ff46dd3ff15 |
|
14-Apr-2010 |
Timo Sirainen <tss@iki.fi> |
auth: Fixed userdb tempfail to work with blocking userdbs.
--HG--
branch : HEAD |
3c9828bc22054744d740925fc9519d02ecb89184 |
|
14-Apr-2010 |
Timo Sirainen <tss@iki.fi> |
auth: Removed userdb checking code from passdb code paths.
--HG--
branch : HEAD |
9261dbf0675204898c6557591c7aa376e23a52b2 |
|
07-Apr-2010 |
Timo Sirainen <tss@iki.fi> |
Started using str_to_*() functions instead of libc's ones.
--HG--
branch : HEAD |
31597236d79ac38a5cea7ab65a9d0a3df64ed201 |
|
06-Apr-2010 |
Timo Sirainen <tss@iki.fi> |
auth: Code cleanup.
--HG--
branch : HEAD |
3313a51ef9b245248d672c20f930c52a577a42f7 |
|
31-Mar-2010 |
Timo Sirainen <tss@iki.fi> |
auth: If userdb lookup returns tempfail, return reason field (if any).
--HG--
branch : HEAD |
459b483806babd159daa8b461377281d89bb3bdc |
|
26-Mar-2010 |
Timo Sirainen <tss@iki.fi> |
auth: Error handling fix.
--HG--
branch : HEAD |
be5c76fabc7439fd33bc799bc3ab3f570799977b |
|
16-Mar-2010 |
Timo Sirainen <tss@iki.fi> |
auth worker: Verify that both client and server see the same passdb/userdb IDs.
--HG--
branch : HEAD |
f0c01ca67be18ed9c8011a094db2773f8795a1eb |
|
16-Mar-2010 |
Timo Sirainen <tss@iki.fi> |
auth: Fixed blocking userdb lookups.
--HG--
branch : HEAD |
ce6b6093957885a74fd6e85c18801dbb727d61ec |
|
16-Mar-2010 |
Timo Sirainen <tss@iki.fi> |
auth worker: Fixes to handling invalid input from auth server.
--HG--
branch : HEAD |
9ed2951bd0bb1878a27437d7c00611b2baadd614 |
|
13-Mar-2010 |
Timo Sirainen <tss@iki.fi> |
auth: Initial support for per-protocol auth settings.
Currently the list of services is hard-coded. This should be changed so that
config lookup returns the service names.
--HG--
branch : HEAD |
849969f639a00eab26791db3cb1b66430420c0cd |
|
13-Mar-2010 |
Timo Sirainen <tss@iki.fi> |
auth: passdb/userdb backends no longer know about struct auth_passdb/auth_userdb.
--HG--
branch : HEAD |
3cf67672fdc87583cb23ce088c95bb5dee60e74d |
|
13-Mar-2010 |
Timo Sirainen <tss@iki.fi> |
auth: Cleaned up struct auth_passdb/auth_userdb.
--HG--
branch : HEAD |
e59faf65ce864fe95dc00f5d52b8323cdbd0608a |
|
25-Jan-2010 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2010.
--HG--
branch : HEAD |
788a0754cfd38dcfec1902844b085e4e84cfe7e6 |
|
13-Nov-2009 |
Timo Sirainen <tss@iki.fi> |
auth worker: Don't start breaking if connection to auth master dies.
--HG--
branch : HEAD |
4e65040b019c061d242c8bc19bf76009679b8a15 |
|
23-Oct-2009 |
Timo Sirainen <tss@iki.fi> |
auth worker client deinit fixes.
--HG--
branch : HEAD |
7cba14a4c3beb026a2862ee50d24c554fa713329 |
|
23-Oct-2009 |
Timo Sirainen <tss@iki.fi> |
auth: Cleaned up auth worker client deinit code.
--HG--
branch : HEAD |
4d4d6d4745682790c20d759ba93dbea46b812c5d |
|
22-May-2009 |
Timo Sirainen <tss@iki.fi> |
lib-master has now a global master_service variable that all binaries use.
There should always be only one of them anyway.
--HG--
branch : HEAD |
43d3ea2780b5f8557ede7b4c039e8f56cb8d357d |
|
13-May-2009 |
Timo Sirainen <tss@iki.fi> |
Implemented support for listing all users in userdb.
--HG--
branch : HEAD |
08d6658a4e2ec8104cd1307f6baa75fdb07a24f8 |
|
05-May-2009 |
Mark Washenberger <none@none> |
Renamed headers to prevent collision if they were flattened on an install.
--HG--
branch : HEAD |
d176f84ce5ca2073f4dfbafb457b9c74f6bf0d76 |
|
24-Apr-2009 |
Timo Sirainen <tss@iki.fi> |
Initial commit for v2.0 master rewrite. Several features are still missing.
--HG--
branch : HEAD |
430c0b0c370bebeeceba2e206be76bc134742f41 |
|
21-Feb-2009 |
Timo Sirainen <tss@iki.fi> |
auth workers: Return plaintext credentials to parent process if possible, so it gets cached instead of some other scheme.
--HG--
branch : HEAD |
cac0f62d29025e5493c53c1d26c6b00c88b089eb |
|
21-Feb-2009 |
Timo Sirainen <tss@iki.fi> |
Auth workers: Don't duplicate "nopassword" field.
--HG--
branch : HEAD |
d69de4bd54b3f7ba03057d4d28f25fdde4dff84f |
|
02-Feb-2009 |
Timo Sirainen <tss@iki.fi> |
userdb prefetch + blocking passdbs was still broken with non-plaintext auth.
--HG--
branch : HEAD |
938835576b218f6bb9498d829cef9514f8609c6f |
|
26-Jan-2009 |
Timo Sirainen <tss@iki.fi> |
Another caching fix to blocking passdbs when using non-plaintext auth.
--HG--
branch : HEAD |
a5077edbb3c2a9eb5f3543a8f97fc764c163ccee |
|
26-Jan-2009 |
Timo Sirainen <tss@iki.fi> |
Previous change to handling blocking passdbs broke it for userdb prefetch.
--HG--
branch : HEAD |
33dd58ab84a020c4f061d2f6031eb6d4c168df1b |
|
08-Jan-2009 |
Timo Sirainen <tss@iki.fi> |
auth cache wasn't working correctly for all fields (e.g. allow_nets) with blocking passdbs.
The extra cache-only fields weren't transferred to the main auth process
which was handling the cached entries.
--HG--
branch : HEAD |
45312f52ff3a3d4c137447be4c7556500c2f8bf2 |
|
06-Jan-2009 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2009.
--HG--
branch : HEAD |
798cfe56c9871262770384da1239162b3800cce1 |
|
16-Dec-2008 |
Timo Sirainen <tss@iki.fi> |
Replaced auth_worker_max_request_count setting with passdb pam { args = max_requests=n }
--HG--
branch : HEAD |
3ff7b8effe94ff4275c16dfb32f2cf256959a01d |
|
22-Oct-2008 |
Timo Sirainen <tss@iki.fi> |
Auth worker: Don't die after idling one minute. The server process decides when to do it.
--HG--
branch : HEAD |
226259ee6fb9830dafc1a5ba1e95bf5a4345b406 |
|
08-Mar-2008 |
Timo Sirainen <tss@iki.fi> |
Use auth-stream API to build all TAB-delimited strings to make sure strings
are escaped properly where necessary.
--HG--
branch : HEAD |
99aec80ae156689abd5a568c647884d0c72f143c |
|
21-Feb-2008 |
Timo Sirainen <tss@iki.fi> |
Blocking passdbs that returned some userdb_* fields returned also an extra
userdb_<username> field.
--HG--
branch : HEAD |
bebb5ec7e1ddd1e1ced15c69d4003efb2544f80a |
|
21-Feb-2008 |
Timo Sirainen <tss@iki.fi> |
Blocking passdbs that returned some userdb_* fields returned also an extra
userdb_<username> field.
--HG--
branch : HEAD |
19e8adccba16ff419f5675b1575358c2956dce83 |
|
11-Feb-2008 |
Timo Sirainen <tss@iki.fi> |
Renamed T_FRAME_BEGIN/END to T_BEGIN/END. Removed T_FRAME() macro and
replaced them with T_BEGIN/END calls. T_FRAME() made it difficult to debug
code with gdb.
--HG--
branch : HEAD |
76b43e4417bab52e913da39b5f5bc2a130d3f149 |
|
01-Jan-2008 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2008.
--HG--
branch : HEAD |
eddd9bf1a1369aea4a2715f6be1137da6d17d293 |
|
05-Dec-2007 |
Timo Sirainen <tss@iki.fi> |
Replaced t_push/t_pop calls with T_FRAME*() macros.
--HG--
branch : HEAD |
fc8d5f0ac909cca77840538e8beef98a8d40c21c |
|
17-Sep-2007 |
Timo Sirainen <tss@iki.fi> |
Transfer also userdb information from blocking passdb workers, so prefetch
doesn't break with auth cache.
--HG--
branch : HEAD |
89a126810703c666309310d0f3189e9834d70b5b |
|
16-Sep-2007 |
Timo Sirainen <tss@iki.fi> |
Replaced my Copyright notices. The year range always ends with 2007 now.
My name was replaced with "Dovecot authors". In many cases I didn't really
even own the copyright, so this is more correct.
--HG--
branch : HEAD |
43358fffb1d9f3091fd94895e0ac4643c50e2388 |
|
09-Aug-2007 |
Timo Sirainen <tss@iki.fi> |
Don't crash if blocking passdb doesn't support credential lookups.
--HG--
branch : HEAD |
5d4855d7b4dcffb6975ed8e3c9c376dac74e5c8a |
|
07-Aug-2007 |
Timo Sirainen <tss@iki.fi> |
Pass extra_fields from auth worker to server also if authentication failed.
--HG--
branch : HEAD |
484e12acec34f16e5a8adc001e23ae48f1dda8c7 |
|
07-Aug-2007 |
Timo Sirainen <tss@iki.fi> |
Changed set_credentials() callback to take a bool success instead of
enum passdb_result.
--HG--
branch : HEAD |
4376643cd2c7110e752c09f838f2c4eee6ed8ac6 |
|
06-Aug-2007 |
Timo Sirainen <tss@iki.fi> |
Userdb prefetch didn't work with blocking passdbs.
--HG--
branch : HEAD |
2526d52441ef368215ab6bf04fd0356d3b09d235 |
|
02-Aug-2007 |
Timo Sirainen <tss@iki.fi> |
Renamed i_stream_create_file() to i_stream_create_fd().
--HG--
branch : HEAD |
93fa87cf1a96c4f279ec4f5c311820313ba12c34 |
|
02-Aug-2007 |
Timo Sirainen <tss@iki.fi> |
Split o_stream_create_file() to _create_fd() and _create_fd_file().
--HG--
branch : HEAD |
fe363b433b8038a69b55169da9dca27892ad7d18 |
|
24-Jul-2007 |
Timo Sirainen <tss@iki.fi> |
Removed memory pool parameter from iostreams. Default pool was almost always
used, and the stream usually required destroying anyway so it didn't even
make freeing memory easier.
--HG--
branch : HEAD |
6fabfb7bbfd88d0c1de66981e52850f26067623b |
|
03-Jul-2007 |
Timo Sirainen <tss@iki.fi> |
Changed userdb callback API. Don't require uid/gid to be returned by userdb.
--HG--
branch : HEAD |
b44650b0f48a4b5f0dc240ed836833a00b643b9f |
|
13-May-2007 |
Timo Sirainen <tss@iki.fi> |
All password schemes can now be encoded with base64 or hex. The encoding is
".b64", ".base64" or ".hex" suffix in the scheme, eg. {plain.b64}.
Password scheme verification function can now be set to NULL, in which case
the verification is done by generating a new crypted password from given
plaintext password and comparing it.
--HG--
branch : HEAD |
a8e132559a7ebe54c8269d79ce29fa3338c76199 |
|
13-May-2007 |
Timo Sirainen <tss@iki.fi> |
Removed enum passdb_credentials. Use scheme strings directly instead. This
makes it possible to implement new mechanisms in plugins.
--HG--
branch : HEAD |
f968e62caa52a8924bd05ebf76ff515b5c18e17b |
|
31-Mar-2007 |
Timo Sirainen <tss@iki.fi> |
Reverted accidental commit. This code isn't ready yet.
--HG--
branch : HEAD |
1108376e39a19912e8394e64e19b1bc6f6691cf6 |
|
30-Mar-2007 |
Timo Sirainen <tss@iki.fi> |
Moved all storage destruction code to mail-storage.c and made destroy()
optional. Removed set_callbacks(). Made autodetect() optional.
--HG--
branch : HEAD |
adc409a7ac9689d3baf811712ad5a5432cab2d87 |
|
16-Feb-2007 |
Timo Sirainen <tss@iki.fi> |
Blocking passdbs didn't work as masterdbs.
--HG--
branch : HEAD |
661911ee2ea6b9f3f41650ccf74f3716e189da72 |
|
16-Dec-2006 |
Timo Sirainen <tss@iki.fi> |
Changed the default naming for password schemes: HMAC-MD5 -> CRAM-MD5. MD5
-> MD5-CRYPT. The old names still work for backwards compatibility.
--HG--
branch : HEAD |
2cfe9983ce7a6280636ee12beccc2e865111967b |
|
15-Dec-2006 |
Timo Sirainen <tss@iki.fi> |
Replaced void *context from a lot of callbacks with the actual context
type. Also added/fixed some context type checks.
--HG--
branch : HEAD |
0f39a57760d93cddbce3ca43096d78e0fe2f42fd |
|
09-Dec-2006 |
Timo Sirainen <tss@iki.fi> |
We treated internal userdb lookup errors as "user unknown" errors. In such
situations this caused deliver to think the user didn't exist and the mail
get bounced.
--HG--
branch : HEAD |
35136dd2baf8dc30e4e754294ed81ff48e8c1e64 |
|
08-Nov-2006 |
Timo Sirainen <tss@iki.fi> |
Added auth_request_set_credentials() to modify credentials in passdb and
implemented it for SQL passdb. Added passdb_need_set_credentials boolean to
mechanisms to indicate that it's required (OTP will need it). Patch by
Andrey Panin.
--HG--
branch : HEAD |
47bb4a7615c85f212f061499f04f121d6d625387 |
|
17-Oct-2006 |
Timo Sirainen <tss@iki.fi> |
Fixes to handling blocking passdb (ie. MySQL) failures. It ignored any
non-password related checks, such as allow_nets.
--HG--
branch : HEAD |
d89def103cc172eac305e0fb733e89f11dae40b5 |
|
05-May-2006 |
Timo Sirainen <tss@iki.fi> |
Don't send extra TABs to auth worker server, they break it.
--HG--
branch : HEAD |
7569ab8537418b7fc369265f26595b0ef9e4cb35 |
|
14-Apr-2006 |
Timo Sirainen <tss@iki.fi> |
Don't crash if no extra arguments were given to auth worker request.
--HG--
branch : HEAD |
e2a700d0628e395d64cbcef4b5b4510816bf51c4 |
|
22-Feb-2006 |
Timo Sirainen <timo.sirainen@movial.fi> |
Fixed passdb credential lookups to work again with blocking passdbs.
--HG--
branch : HEAD |
8eb94c5190ba09bb6f6f068eec7bf96750f08d1d |
|
20-Feb-2006 |
Timo Sirainen <timo.sirainen@movial.fi> |
Added support for "master users" who can log in as other people. Currently works only with SASL PLAIN authentication by giving it authorization ID string.
--HG--
branch : HEAD |
d5cebe7f98e63d4e2822863ef2faa4971e8b3a5d |
|
14-Jan-2006 |
Timo Sirainen <tss@iki.fi> |
deinit, unref, destroy, close, free, etc. functions now take a pointer to
their data pointer, and set it to NULL. This makes double-frees less likely
to cause security holes.
--HG--
branch : HEAD |
6ef7e31619edfaa17ed044b45861d106a86191ef |
|
13-Jan-2006 |
Timo Sirainen <tss@iki.fi> |
Added "bool" type and changed all ints that were used as booleans to bool.
--HG--
branch : HEAD |
25ee72451d16374ed27fdbf829f4ec756c778352 |
|
30-Dec-2005 |
Timo Sirainen <tss@iki.fi> |
Added authentication bind support. Patch by J.M. Maurer.
Also cleaned up the LDAP code a bit and made it possible for passdbs to
disable lookup_credentials in runtime.
--HG--
branch : HEAD |
ce89e2964b6bc4925d2dd690417200a110d041c5 |
|
19-Oct-2005 |
Timo Sirainen <tss@iki.fi> |
If passdb returned NULL password (ie. no password needed), it wasn't cached
correctly.
--HG--
branch : HEAD |
b42f37ae6f65ed986315b6885568d32115e589b1 |
|
16-Oct-2005 |
Timo Sirainen <tss@iki.fi> |
Separated userdb_module's interface and the actual data struct.
Now it's possible to have multiple userdbs of same type but with different
settings.
--HG--
branch : HEAD |
b321df9603081896b70ec44635af96d674a9839a |
|
16-Oct-2005 |
Timo Sirainen <tss@iki.fi> |
Separated passdb_module's interface and the actual data struct. Now it's
possible to have multiple passdbs of same type but with different settings.
--HG--
branch : HEAD |
a3dd97fb6d92a89c3de0597fed2d4b044c7aeb84 |
|
16-Oct-2005 |
Timo Sirainen <tss@iki.fi> |
Fixes and cleanups to credentials handling. Also fixed auth caching to work
more correctly in case of internal failures.
--HG--
branch : HEAD |
137ea7ca34005345aa2304a940149b7f3774d727 |
|
07-Aug-2005 |
Timo Sirainen <tss@iki.fi> |
s/occured/occurred/
--HG--
branch : HEAD |
1e0bdb2d0fa7bbd0a0a254754680f6c6d0195333 |
|
16-Jun-2005 |
Timo Sirainen <tss@iki.fi> |
Last change caused user-given passwords to be cached, and later the password
used instead of the real one (ie. login once with correct password, then you
could login using whatever password as long as user is cached). Clearly not
good. Did several changes to make sure this can't happen again.
--HG--
branch : HEAD |
82f53ea81671bcc7b9bf24a34b04a4ba2752efd3 |
|
08-Jun-2005 |
Timo Sirainen <tss@iki.fi> |
Auth workers were leaking memory for each request. Fixed also a few invalid
memory accesses at deinitialization.
--HG--
branch : HEAD |
c1ebcdad1b4d950eb22219704dd9d64a89d0568f |
|
28-May-2005 |
Timo Sirainen <tss@iki.fi> |
If worker process has been idle for 10 minutes, make it kill itself.
--HG--
branch : HEAD |
70c181da837ed85fc5b0426c010b65609bda5329 |
|
26-Apr-2005 |
Timo Sirainen <tss@iki.fi> |
USER auth command requires now service parameter and supports also others
parameters. Fixes a crash in dovecot-auth with deliver+mysql.
--HG--
branch : HEAD |
72bb770023dd5c2eb4e0b56a79203233548b2aef |
|
21-Apr-2005 |
Timo Sirainen <tss@iki.fi> |
We weren't sending proxy's password back with blocking passdb.
--HG--
branch : HEAD |
3d370bb6763ac4af4a0d143ad7c93300d5ddff89 |
|
03-Apr-2005 |
Timo Sirainen <tss@iki.fi> |
passdb can now change the username that was used to log in. This is mostly
useful to support case-insensitive username lookups.
--HG--
branch : HEAD |
bd354c19cb93c07ade79477674328a54146ea332 |
|
02-Apr-2005 |
Timo Sirainen <tss@iki.fi> |
Auth workers weren't working correctly with more than one passdb/userdb.
--HG--
branch : HEAD |
2efe0618b62fb1e3cd41a692f02d674a54c7720e |
|
24-Mar-2005 |
Timo Sirainen <tss@iki.fi> |
Previous blocking passdb patch fixed APOP only. Fixing others now. Patch by
Andrey Panin.
--HG--
branch : HEAD |
0af3274706d337b2930bd34f0377f2cc2dbcd18a |
|
16-Mar-2005 |
Timo Sirainen <tss@iki.fi> |
Non-plaintext blocking passdb authentication wasn't working. Patch by Andrey
Panin.
--HG--
branch : HEAD |
9398c0935613ba038cf2275ff66c43b25092cfd0 |
|
07-Mar-2005 |
Timo Sirainen <tss@iki.fi> |
Handle USER requests from master connections.
--HG--
branch : HEAD |
c2f24d55319fad0b6c03425f402f0cb0cb1a318b |
|
07-Mar-2005 |
Timo Sirainen <tss@iki.fi> |
Blocking userdb: Don't break if user wasn't found.
--HG--
branch : HEAD |
e9503210d3521a6833ed62dc332fc42ffb0e7a13 |
|
07-Mar-2005 |
Timo Sirainen <tss@iki.fi> |
Replaced userdb/passdb settings with blocks so it's possible to give
multiple ones. Plaintext password mechanisms now support handling multiple
passdbs, but others don't yet. Also fixed a few memory leaks.
--HG--
branch : HEAD |
2e29e4797a48d78d669821722bdb54fd0a1d3b94 |
|
02-Mar-2005 |
Timo Sirainen <tss@iki.fi> |
Forgot to add for blocking passdb/userdb workers..
--HG--
branch : HEAD |