816d20be0cf95fc4eb1a8aa716639e73b8ba525e |
|
12-Feb-2018 |
Martti Rannanjärvi <martti.rannanjarvi@dovecot.fi> |
lib: Add restrict_access_flags enum to use with restrict_access[_by_env]()
Swap parameter locations in the functions to make sure plugins are
updated to use the new api. |
bcb4e51a409d94ae670de96afb8483a4f7855294 |
|
01-Jan-2018 |
Stephan Bosch <stephan.bosch@dovecot.fi> |
Updated copyright notices to include the year 2018. |
139143f1b798472438b813343a48601f1c564060 |
|
15-Dec-2017 |
Sergey Kitov <sergey.kitov@open-xchange.com> |
global: Change calls to array_idx_modifiable to array_idx_get_space.
Only calls that require space allocation are to be changed. |
9e0f35dcc277e3f55da306519738e5ca3499a2b6 |
|
07-Sep-2017 |
Aki Tuomi <aki.tuomi@dovecot.fi> |
global: Remove random_init/random_deinit calls
lib already initializes it. |
2454dfa32c93c20a8522c6ed42fe057baaac9f9a |
|
01-Jan-2017 |
Stephan Bosch <stephan.bosch@dovecot.fi> |
Updated copyright notices to include the year 2017. |
efe78d3ba24fc866af1c79b9223dc0809ba26cad |
|
24-Dec-2016 |
Stephan Bosch <stephan.bosch@dovecot.fi> |
global: Replaced all instances of memset(p, 0, sizeof(*p)) with the new i_zero() macro.
Used the following script:
C_FILES=`git ls-files *.c`
H_FILES=`git ls-files *.h`
for F in "$C_FILES $H_FILES"; do
echo "$F"
perl -p -i -e 's/safe_memset\(&\(?([^,]*)\)?,\s*0,\s*sizeof\(\g1\)\)/i_zero_safe(&$1)/g' $F
perl -p -i -e 's/safe_memset\(([^,]*),\s*0,\s*sizeof\(\*\g1\)\)/i_zero_safe($1)/g' $F
perl -p -i -e 's/memset\(&\(?([^,]*)\)?,\s*0,\s*sizeof\(\g1\)\)/i_zero(&$1)/g' $F
perl -p -i -e 's/memset\(([^,]*),\s*0,\s*sizeof\(\*\g1\)\)/i_zero($1)/g' $F
done |
ecbc1c76e469e2a9a14e71da59c48b82ab04cde6 |
|
29-Jun-2016 |
Timo Sirainen <timo.sirainen@dovecot.fi> |
auth: Finish policy.[ch] renaming.. |
ef1ff1af5a38ad2b0bc77b3236c4c2d79f2c530f |
|
28-Jun-2016 |
Aki Tuomi <aki.tuomi@dovecot.fi> |
auth-policy: Hook auth policy to auth code |
44cf91b7a701a9b4d9f59a990552eab4f7f64fbc |
|
08-Feb-2016 |
Timo Sirainen <timo.sirainen@dovecot.fi> |
auth: If auth_stats=yes, send statistics to stats process. |
02c335c23bf5fa225a467c19f2c063fb0dc7b8c3 |
|
12-Jan-2016 |
Timo Sirainen <timo.sirainen@dovecot.fi> |
global: freshen copyright
git ls-files | xargs perl -p -i -e 's/(\d+)-201[0-5]/$1-2016/g;s/ (201[0-5]) Dovecot/ $1-2016 Dovecot/' |
7cb128dc4cae2a03a742f63ba7afee23c78e3af0 |
|
05-Jan-2015 |
Phil Carmody <phil@dovecot.fi> |
global: freshen copyright
Robomatically:
git ls-files | xargs perl -p -i -e 's/(\d+)-201[0-4]/$1-2015/g;s/ (201[0-4]) Dovecot/ $1-2015 Dovecot/'
Happy 2015 everyone!
Signed-off-by: Phil Carmody <phil@dovecot.fi> |
a8c5a86d183db25a57bf193c06b41e092ec2e151 |
|
04-Feb-2014 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2014. |
d6b3cfd855c0eebed68be50d3111de1b5a6afeb0 |
|
13-Jun-2013 |
Timo Sirainen <tss@iki.fi> |
Call master_service_init_finish() only after all of the initialization is done.
This way if the init crashes, the master process will throttle a buggy
service. |
5a580c3a38ced62d4bcc95b8ac7c4f2935b5d294 |
|
02-Feb-2013 |
Timo Sirainen <tss@iki.fi> |
Oops :) Update copyrights to 2013 without breaking all .c files. |
cca4ba2a504d70a9fe9fee37f8433997359de52c |
|
02-Feb-2013 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2013. |
bd63b5b860658b01b1f46f26d406e1e4a9dc019a |
|
11-Oct-2012 |
Timo Sirainen <tss@iki.fi> |
Plugin ABI version checking improvements.
Previously the plugin version was checked against the version string
returned by the currently running Dovecot master process, not necessarily
the same as the binary. Also version_ignore=yes setting skipped the version
check entirely.
Now there's a new DOVECOT_ABI_VERSION macro that can (at least in theory) be
updated only when the ABI actually changes. The version is in format
"2.2.ABIv1(2.2.15)", where the (2.2.15) would be the actual Dovecot version
number that gets ignored when comparing the strings.
Also now the plugin version is compared to the actually running binary's
ABI, not the master's version, and it can't be ignored with a setting. |
bdd36cfdba3ff66d25570a9ff568d69e1eb543cf |
|
03-Oct-2012 |
Timo Sirainen <tss@iki.fi> |
Renamed network.[ch] to net.[ch].
The function prefixes already started with net_ instead of network_.
And icecap wants to use network.h for other purpose. :) |
5b89f4d0c7c988a3e2c9d0a2dcbfd48db50407ba |
|
14-Sep-2012 |
Timo Sirainen <tss@iki.fi> |
auth: Auth workers don't need to read token secret. |
ab90f702ceedb7ba445a9a592be0b213b27cbafa |
|
14-Sep-2012 |
Stephan Bosch <stephan@rename-it.nl> |
Added support to perform token-based service process authentication.
Creates hidden SASL method DOVECOT-TOKEN. This method is not available on
the normal auth login socket and thus never presented to clients.
Creates new auth socket type 'tokenlogin'. This otherwise normal login
socket only offers authentication using the DOVECOT-TOKEN mechanism.
Creates new token-login directory in base_dir to separate token logins from
normal logins. This directory is otherwise completely identical to the
normal login dir, i.e. it contains sockets for the service backends, used
to chroot login processes to, etc.
Makes default login socket configurable.
Performs some minor changes to src/login-common to build very sparse
protocols, e.g. avoid the need to implement methods that are not needed. |
4ee00532a265bdfb38539d811fcd12d51210ac35 |
|
19-Aug-2012 |
Timo Sirainen <tss@iki.fi> |
Array API changed: ARRAY_DEFINE(name, type) -> ARRAY(type) name
Easy way to update your existing code:
perl -i -pe 's:ARRAY_DEFINE\(([^,]+), *([^)]+)\);:ARRAY($2) $1;:' **/*.[ch] |
2028d80c2704bbf62b29b2c624b0ee3c3a03c462 |
|
08-Jul-2012 |
Timo Sirainen <tss@iki.fi> |
auth: Added "dict" passdb/userdb. |
e2a88d59c0d47d63ce1ad5b1fd95e487124a3fd4 |
|
24-Jun-2012 |
Timo Sirainen <tss@iki.fi> |
Added o_stream_nsend*() and related functions to make delayed error handling safer.
Once o_stream_nsend*() is called, o_stream_nfinish() must be called before
stream is destroyed to finish checking if there were any errors. If
something failed and the stream is just wanted to be closed,
o_stream_ignore_last_errors() can be called.
For streams where errors don't really make any difference (network sockets)
you can call o_stream_set_no_error_handling() immediately after creating the
stream. |
a10ed8c47534b4c6b6bf2711ccfe577e720a47b4 |
|
23-Jun-2012 |
Timo Sirainen <tss@iki.fi> |
Marked functions parameters that are allowed to be NULL. Some APIs were also changed.
The non-obvious APIs where NULL parameter was changed to "" are
master_service_init() and auth_master_user_list_init().
These checks can currently be enabled only on a patched clang:
http://llvm.org/bugs/show_bug.cgi?id=6786 |
5f5870385cff47efd2f58e7892f251cf13761528 |
|
12-Feb-2012 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2012. |
3a7113e3e2dac0e333e1a3f62af7d682896f59c6 |
|
20-Jan-2012 |
Timo Sirainen <tss@iki.fi> |
auth: Make idle_kill work with auth worker processes. |
f93c833d644ecff0b0f80bee4f1cdde3e697b5c8 |
|
19-Jan-2012 |
Timo Sirainen <tss@iki.fi> |
auth: Throttle SQL auth worker process creation if they can't connect to database. |
b624773984e35dd894db8dff976c1a2114c70782 |
|
19-Jan-2012 |
Timo Sirainen <tss@iki.fi> |
auth: Show a better auth worker process title. |
27abb44a48d7a4eeb30c3efc1e0619f7fa06bf00 |
|
09-Jan-2012 |
Timo Sirainen <tss@iki.fi> |
auth: Implemented support for Postfix's "TCP map" sockets for user existence lookups. |
29d4c6eac14a0b3d79656eb6b206a102fd09d24a |
|
09-Jan-2012 |
Timo Sirainen <tss@iki.fi> |
auth: Use linked list instead of array for storing list of auth connections.
With arrays the removal was slower than necessary. |
faec0abfd648c647030027e86de2ce8911df683b |
|
29-Dec-2011 |
Timo Sirainen <tss@iki.fi> |
Use master_service_connection.name for determining listener type. |
2a64bd1046d6681c462c636832922b13b394edb6 |
|
08-Dec-2011 |
Timo Sirainen <tss@iki.fi> |
auth: If verbose_proctitle=yes, show which processes are auth workers. |
726e5e80865853b31ce51f9977f1fb339a43f301 |
|
23-Nov-2011 |
Timo Sirainen <tss@iki.fi> |
auth: Don't leak memory in deinit. |
86a58337862c546aa489f07e8e6d242f0180e4a0 |
|
07-Oct-2011 |
Timo Sirainen <tss@iki.fi> |
auth: Improved "auth client doesn't have permissions to do .." errors. |
966cb0c1aa58578339cea6f79b4a423a851ab074 |
|
01-Oct-2011 |
Timo Sirainen <tss@iki.fi> |
auth: Lazily load authdb_* and mech_* plugins only when they're needed. |
f6242642593c6b832ed3f8a99ab078031eb99a83 |
|
16-Sep-2011 |
Timo Sirainen <tss@iki.fi> |
auth: Use "auth-worker:" log prefix for auth worker processes. |
9eb6f0bd16958ded6581c310d81c498df5344064 |
|
12-Sep-2011 |
Timo Sirainen <tss@iki.fi> |
auth: Use auth-worker(pid) prefix for auth processes. |
c95b7ce6c3ebf84a9ef20320b9f11ef2129e1f1a |
|
04-Apr-2011 |
Timo Sirainen <tss@iki.fi> |
auth: If auth-userdb socket is 0666, allow peer to do only USER lookups whose uid matches its.
Anything else results in failure. If userdb doesn't return uid, the lookups
also fail. To truly give full permissions for everyone, use 0777 mode. |
2e37d45867d081db150ab78dad303b9077aea24f |
|
04-Mar-2011 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2011. |
183bea41fa640dc8117f3eb45ff935cd81377a84 |
|
04-Mar-2011 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2011. |
de63a9a9859ad77f625e13f5bd675a6b87f677e6 |
|
26-Nov-2010 |
Timo Sirainen <tss@iki.fi> |
auth: Assume inet_listeners are auth client listeners if they exist. |
b918f91cecd70b83766a27a8cf40097b712668f9 |
|
26-Nov-2010 |
Timo Sirainen <tss@iki.fi> |
auth: Minor error message fix. |
361c90a103f227cd2ca33e52e5c671d1e61d3541 |
|
03-Nov-2010 |
Timo Sirainen <tss@iki.fi> |
auth workers: Don't unnecessary connect to anvil. |
12c40a1a042d4de180b3dcef6002a8d0cf02d152 |
|
15-Jun-2010 |
Timo Sirainen <tss@iki.fi> |
auth: Fixed crash when a plugin was trying to register password scheme.
--HG--
branch : HEAD |
2c8ff32886e56a5e037169c9ebef4219f85a5629 |
|
08-Jun-2010 |
Timo Sirainen <tss@iki.fi> |
auth: Abort pending penalty lookups earlier in deinit.
--HG--
branch : HEAD |
9d75363d3fbabc2fbc2d80f06672e3ed8965804a |
|
08-Jun-2010 |
Timo Sirainen <tss@iki.fi> |
auth: Changed how auth deinitilization works.
--HG--
branch : HEAD |
304eae229e1e3cc02044f94a8f3a057c6345030e |
|
04-Jun-2010 |
Timo Sirainen <tss@iki.fi> |
auth: Deinit auth request handler before pass/userdbs
--HG--
branch : HEAD |
f859b51cf6aedc3c5b0d2307122100fa9959867f |
|
04-Jun-2010 |
Timo Sirainen <tss@iki.fi> |
auth: When stopping, try to wait for auth clients to disconnect.
This should avoid auth failures during config reloads.
--HG--
branch : HEAD |
db693bf6fcae96d834567f1782257517b7207655 |
|
27-May-2010 |
Timo Sirainen <tss@iki.fi> |
lib-master API changed to avoid accidentally leaking client connections.
This change also fixes many such leaks.
--HG--
branch : HEAD |
bbadd5331f534017cf62d5183003b3d9fdad079e |
|
19-May-2010 |
Timo Sirainen <tss@iki.fi> |
auth: Create auth-login socket by default where internal user can connect to.
--HG--
branch : HEAD |
daa7e7459749ae8f82cd3eed9c44522d81c609a3 |
|
12-May-2010 |
Timo Sirainen <tss@iki.fi> |
auth: Separate auth and login connections. Non-login requests are freed immediately after auth finished.
The login connections are used by Dovecot internally, while the auth
connections are for SMTP AUTH etc.
--HG--
branch : HEAD |
401b0787fff2dc986a5321ddb32acb1947ff66b0 |
|
03-May-2010 |
Timo Sirainen <tss@iki.fi> |
auth: If verbose_proctitle=yes, show auth request counts in ps.
- wait: waiting for auth client to do something (either continue multistep
auth mechanism or issue master request for a finished auth)
- passdb: waiting for passdb lookup to finish
- userdb: waiting for userdb lookup to finish
--HG--
branch : HEAD |
5d60e31c7b701b606067a20bc88dcc8a6de7bbd6 |
|
19-Mar-2010 |
Timo Sirainen <tss@iki.fi> |
auth: Fixed support for per-service auth settings.
--HG--
branch : HEAD |
16bb904d0fd67500b0660f4d7b4e2449e7733b76 |
|
14-Mar-2010 |
Timo Sirainen <tss@iki.fi> |
auth: Fixed crash at deinit.
--HG--
branch : HEAD |
9ed2951bd0bb1878a27437d7c00611b2baadd614 |
|
13-Mar-2010 |
Timo Sirainen <tss@iki.fi> |
auth: Initial support for per-protocol auth settings.
Currently the list of services is hard-coded. This should be changed so that
config lookup returns the service names.
--HG--
branch : HEAD |
21c317a20c4c3784b54fb3e90ee3751870afdcc3 |
|
13-Mar-2010 |
Timo Sirainen <tss@iki.fi> |
auth: Moved mechanism list out of struct auth.
It could have been good there, except mechanism list is sent before there's
any knowledge of what type of client is on the other side. Maybe in future
different mechanism list could be given based on the unix socket name.
--HG--
branch : HEAD |
1cc683c5d442a1a3bed5a18c1fb37180cb7ef84b |
|
13-Mar-2010 |
Timo Sirainen <tss@iki.fi> |
auth: auth_penalty is now a global single instance.
--HG--
branch : HEAD |
1d22eaac93de41319918a1fc6de42bb302e25c1a |
|
13-Mar-2010 |
Timo Sirainen <tss@iki.fi> |
auth: auth_userdb and auth_passdb no longer has pointer to struct auth.
--HG--
branch : HEAD |
e59faf65ce864fe95dc00f5d52b8323cdbd0608a |
|
25-Jan-2010 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2010.
--HG--
branch : HEAD |
9ba7e76c20be775f368254e3059a6189fe789f16 |
|
07-Dec-2009 |
Timo Sirainen <tss@iki.fi> |
module_dir_load*() API changed to take settings struct, with debug field.
Fixed debug logging to also go from info log to debug log.
--HG--
branch : HEAD |
f6005caf2264e3b271df41f490e06d316fe3e1c1 |
|
18-Nov-2009 |
Timo Sirainen <tss@iki.fi> |
auth: Unload modules earlier to avoid crashes.
--HG--
branch : HEAD |
788a0754cfd38dcfec1902844b085e4e84cfe7e6 |
|
13-Nov-2009 |
Timo Sirainen <tss@iki.fi> |
auth worker: Don't start breaking if connection to auth master dies.
--HG--
branch : HEAD |
ad61b40b1ac2b7a0ac323b07be5194d973907126 |
|
12-Nov-2009 |
Timo Sirainen <tss@iki.fi> |
auth: Unload plugins after everything else is deinitialized.
Fixes a crash at deinit when SQL drivers were plugins.
--HG--
branch : HEAD |
4e65040b019c061d242c8bc19bf76009679b8a15 |
|
23-Oct-2009 |
Timo Sirainen <tss@iki.fi> |
auth worker client deinit fixes.
--HG--
branch : HEAD |
7cba14a4c3beb026a2862ee50d24c554fa713329 |
|
23-Oct-2009 |
Timo Sirainen <tss@iki.fi> |
auth: Cleaned up auth worker client deinit code.
--HG--
branch : HEAD |
a3fe8c0c54d87822f4b4f8f0d10caac611861b2b |
|
21-Oct-2009 |
Timo Sirainen <tss@iki.fi> |
Moved process title init to lib-master. With Linux-hack enabled it now preserves command args.
--HG--
branch : HEAD |
578ef2538ccf42e2a48234c24a8b709397101d88 |
|
21-Oct-2009 |
Timo Sirainen <tss@iki.fi> |
Moved most of getopt() handling to lib-master.
--HG--
branch : HEAD |
cf0ad1a0bddb0787f3d7b408a96d721a8b2a98a3 |
|
20-Oct-2009 |
Timo Sirainen <tss@iki.fi> |
Redesigned how login process passes connections to mail processes and changed related APIs.
Master process is no longer in the middle.
--HG--
branch : HEAD |
e0740628f6ca05f4bc79a9d8a90b650f4d38d4d0 |
|
09-Sep-2009 |
Timo Sirainen <tss@iki.fi> |
Removed mail_log_max_lines_per_sec setting and related code.
It's pretty unnecessary and there's really no good way to implement it with
shared log pipes.
--HG--
branch : HEAD |
2024157e8de36edd31f5fd72f5ea7364a0955fa7 |
|
31-Aug-2009 |
Timo Sirainen <tss@iki.fi> |
config: Removed auth sections completely for now.
They might come back in some other more generic form.
--HG--
branch : HEAD |
3ff29d5bb3e5993e77ca1f0d9f2fe02b80fbb3af |
|
31-Aug-2009 |
Timo Sirainen <tss@iki.fi> |
auth: Use net_getunixname() instead of implementing it ourself.
--HG--
branch : HEAD |
e7f47c86df52b81bfe46d3d380c8eb4031199737 |
|
28-Aug-2009 |
Timo Sirainen <tss@iki.fi> |
auth: More fixes to figuring out what type the auth socket is.
--HG--
branch : HEAD |
8d521180732e086173d08d01e205fe3a8c232418 |
|
24-Aug-2009 |
Timo Sirainen <tss@iki.fi> |
auth: Don't crash at startup if auth socket name doesn't contain "-".
--HG--
branch : HEAD |
3278289d240da169166de8aa785273c5df904e64 |
|
17-Aug-2009 |
Timo Sirainen <tss@iki.fi> |
auth: Added auth-master socket that's allowed to do REQUEST commands.
--HG--
branch : HEAD |
1d32ae27503cd011a116363b4e9a49db02333eb1 |
|
17-Aug-2009 |
Timo Sirainen <tss@iki.fi> |
Renamed auth-master socket to auth-userdb socket.
--HG--
branch : HEAD |
4d4d6d4745682790c20d759ba93dbea46b812c5d |
|
22-May-2009 |
Timo Sirainen <tss@iki.fi> |
lib-master has now a global master_service variable that all binaries use.
There should always be only one of them anyway.
--HG--
branch : HEAD |
43d3ea2780b5f8557ede7b4c039e8f56cb8d357d |
|
13-May-2009 |
Timo Sirainen <tss@iki.fi> |
Implemented support for listing all users in userdb.
--HG--
branch : HEAD |
e4d7735b1342484d2f2155b7ce41f34389d3b9df |
|
05-May-2009 |
Timo Sirainen <tss@iki.fi> |
auth: Minor code cleanup.
--HG--
branch : HEAD |
08d6658a4e2ec8104cd1307f6baa75fdb07a24f8 |
|
05-May-2009 |
Mark Washenberger <none@none> |
Renamed headers to prevent collision if they were flattened on an install.
--HG--
branch : HEAD |
d176f84ce5ca2073f4dfbafb457b9c74f6bf0d76 |
|
24-Apr-2009 |
Timo Sirainen <tss@iki.fi> |
Initial commit for v2.0 master rewrite. Several features are still missing.
--HG--
branch : HEAD |
e2ba2c102942d03ae7165cd20896fe5eb331b464 |
|
22-Apr-2009 |
Timo Sirainen <tss@iki.fi> |
Don't crash if auth settings don't contain any sockets.
--HG--
branch : HEAD |
b463bb8fbca5963e87355729995f19377724dbc2 |
|
10-Apr-2009 |
Timo Sirainen <tss@iki.fi> |
auth: Fixed listening in extra master/client sockets.
--HG--
branch : HEAD |
a85d9c3e0b7cb1744a5c8f71501b3039d678c47a |
|
08-Apr-2009 |
Timo Sirainen <tss@iki.fi> |
Cleaned up restrict_access*() API.
--HG--
branch : HEAD |
0c423a9cc14c5872f012be9640cb6e0d66a36717 |
|
02-Apr-2009 |
Timo Sirainen <tss@iki.fi> |
Try to make sure auth process can dump core, and if it can't try to find why.
--HG--
branch : HEAD |
b70234f335410d6a8913f145d1cc9befa6f00b42 |
|
01-Apr-2009 |
Timo Sirainen <tss@iki.fi> |
When a process is killed, show the signal code and the sending process's pid and uid.
--HG--
branch : HEAD |
1c7fa51b35231f375998f66d5756f214519218f8 |
|
01-Apr-2009 |
Timo Sirainen <tss@iki.fi> |
lib-signals: Changed callback API to return siginfo_t.
--HG--
branch : HEAD |
1213eb8287aedfd21af361abbc877569f63103fe |
|
13-Mar-2009 |
Timo Sirainen <tss@iki.fi> |
auth: Improved getpwnam() and getgrnam() error handling.
--HG--
branch : HEAD |
a64adf62fa33f2463a86f990217b0c9078531a40 |
|
28-Jan-2009 |
Timo Sirainen <tss@iki.fi> |
Initial commit for config rewrite.
--HG--
branch : HEAD |
bf3dff6e365eb080c19ceb3d96f07a73fdfb5f62 |
|
13-Jan-2009 |
Timo Sirainen <tss@iki.fi> |
Auth sockets: Allow specifying user and group with numbers.
--HG--
branch : HEAD |
e17fd08d865094c644aa3298ad29320b60c60247 |
|
07-Jan-2009 |
Timo Sirainen <tss@iki.fi> |
Increase listen queues to handle high loads better.
Patch by Apple.
--HG--
branch : HEAD |
45312f52ff3a3d4c137447be4c7556500c2f8bf2 |
|
06-Jan-2009 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2009.
--HG--
branch : HEAD |
798cfe56c9871262770384da1239162b3800cce1 |
|
16-Dec-2008 |
Timo Sirainen <tss@iki.fi> |
Replaced auth_worker_max_request_count setting with passdb pam { args = max_requests=n }
--HG--
branch : HEAD |
1e45d866c147e534958a4dbc092b1f25d8362aca |
|
23-Oct-2008 |
Timo Sirainen <tss@iki.fi> |
The new checkpassword code was still missing a bit to actually work.
--HG--
branch : HEAD |
d198989a7cac917ba0bd341a76d94e8a32267074 |
|
26-Sep-2008 |
Timo Sirainen <tss@iki.fi> |
Added net_listen_unix_unlink_stale() and use it where needed to avoid code duplication.
--HG--
branch : HEAD |
f05a995eff2bc007d70cdbdd0ff9b803b9e707da |
|
05-Aug-2008 |
Timo Sirainen <tss@iki.fi> |
dovecot-auth: Give a nice error message if you try to run it manually.
--HG--
branch : HEAD |
19e8adccba16ff419f5675b1575358c2956dce83 |
|
11-Feb-2008 |
Timo Sirainen <tss@iki.fi> |
Renamed T_FRAME_BEGIN/END to T_BEGIN/END. Removed T_FRAME() macro and
replaced them with T_BEGIN/END calls. T_FRAME() made it difficult to debug
code with gdb.
--HG--
branch : HEAD |
e959e240bb8975cba293a94dbc61712b232904f6 |
|
05-Jan-2008 |
Timo Sirainen <tss@iki.fi> |
Reverted "environment array" changes. It broke overriding imap/pop3 settings
from userdb and the performance improvements weren't all that great anyway.
--HG--
branch : HEAD |
cffa5888a8bd922e0a84f3b3ffe0ab7392e6dc3f |
|
02-Jan-2008 |
Timo Sirainen <tss@iki.fi> |
Build environment using envarr and pass it to execve(). This is faster than
using putenv() directly. restrict_access_*_env() API changed to take
environment array parameter.
--HG--
branch : HEAD |
2872c818f9c6704609f4d67d984b033a63e3a108 |
|
01-Jan-2008 |
Timo Sirainen <tss@iki.fi> |
Make sure failed auth requests stay in failure buffer for at least a second.
--HG--
branch : HEAD |
76b43e4417bab52e913da39b5f5bc2a130d3f149 |
|
01-Jan-2008 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2008.
--HG--
branch : HEAD |
eddd9bf1a1369aea4a2715f6be1137da6d17d293 |
|
05-Dec-2007 |
Timo Sirainen <tss@iki.fi> |
Replaced t_push/t_pop calls with T_FRAME*() macros.
--HG--
branch : HEAD |
89a126810703c666309310d0f3189e9834d70b5b |
|
16-Sep-2007 |
Timo Sirainen <tss@iki.fi> |
Replaced my Copyright notices. The year range always ends with 2007 now.
My name was replaced with "Dovecot authors". In many cases I didn't really
even own the copyright, so this is more correct.
--HG--
branch : HEAD |
43d32cbe60fdaef2699d99f1ca259053e9350411 |
|
16-Sep-2007 |
Timo Sirainen <tss@iki.fi> |
Renamed __attr_*__ to ATTR_*. Renamed __attrs_used__ to ATTRS_DEFINED.
--HG--
branch : HEAD |
d159020dab84d2adcf26c5ba06b174d21bc2fd66 |
|
06-Aug-2007 |
Timo Sirainen <tss@iki.fi> |
Plugin handling fixes.
--HG--
branch : HEAD |
5ee71aa141edb042e983b313da75e9069b457d85 |
|
06-Aug-2007 |
Timo Sirainen <tss@iki.fi> |
If version_ignore=yes, ignore plugin versions also.
--HG--
branch : HEAD |
69293bd0b4ceb47c7f12c4a01254f4cddf700470 |
|
06-Aug-2007 |
Timo Sirainen <tss@iki.fi> |
Changed plugin handling. We'll just load and call _init() functions for all
plugins in $moduledir/auth/.
--HG--
branch : HEAD |
43a66a0b16299bd4f7615acd85e98bd3832c54d5 |
|
06-Aug-2007 |
Timo Sirainen <tss@iki.fi> |
Added pass/userdb_register_module() functions and used them to register the
build-in functions instead of having a predefined array.
--HG--
branch : HEAD |
174a54c74848b8668acd72ddf36d9b4745e1ad5e |
|
15-Mar-2007 |
Timo Sirainen <tss@iki.fi> |
Fixes to handling log prefixes. imap/pop3 processes now log the
mail_log_prefix even when started with --exec-mail.
--HG--
branch : HEAD |
b439928e47cb120eacee4ff1eb53156ae31d30dc |
|
08-Mar-2007 |
Timo Sirainen <tss@iki.fi> |
Removed pool parameter from io_loop_create()
--HG--
branch : HEAD |
ecb1b2d6236942bf82f822e8d0167f0e160b206d |
|
19-Jan-2007 |
Timo Sirainen <tss@iki.fi> |
Several fixes to handling deinitialization without crashing.
--HG--
branch : HEAD |
59151b71059df1190acd75d8717ed04a7920c862 |
|
15-Dec-2006 |
Timo Sirainen <tss@iki.fi> |
Added context parameter type safety checks for most callback APIs.
--HG--
branch : HEAD |
05b422b01541f742c4d145c1aa48f4b03256f1ae |
|
10-Aug-2006 |
Timo Sirainen <tss@iki.fi> |
Require that master's version number matches the child's, unless
version_ignore=yes. Usually it's an accidental installation problem if the
version numbers don't match.
--HG--
branch : HEAD |
eb49a3378f746e95366be78448995253ff4f1412 |
|
04-May-2006 |
Timo Sirainen <tss@iki.fi> |
Use lib_signals_ignore() for signals we really want ignored.
--HG--
branch : HEAD |
91791e4d9466c8ffc109fc1b831b3218e908b567 |
|
14-Apr-2006 |
Timo Sirainen <tss@iki.fi> |
Deinitialization crashfixes.
--HG--
branch : HEAD |
0371406d952fe51367c7be91703e5634b7d9d225 |
|
26-Jan-2006 |
Timo Sirainen <tss@iki.fi> |
Added support for dynamically building SQL drivers.
--HG--
branch : HEAD |
d5cebe7f98e63d4e2822863ef2faa4971e8b3a5d |
|
14-Jan-2006 |
Timo Sirainen <tss@iki.fi> |
deinit, unref, destroy, close, free, etc. functions now take a pointer to
their data pointer, and set it to NULL. This makes double-frees less likely
to cause security holes.
--HG--
branch : HEAD |
6ef7e31619edfaa17ed044b45861d106a86191ef |
|
13-Jan-2006 |
Timo Sirainen <tss@iki.fi> |
Added "bool" type and changed all ints that were used as booleans to bool.
--HG--
branch : HEAD |
2f340bd8f8c4dfadad9c7577a0de8c0c5a7cb213 |
|
06-Dec-2005 |
Timo Sirainen <tss@iki.fi> |
Deinitialize userdbs/passdbs first, so they can still generate auth failure
replies without crashing.
--HG--
branch : HEAD |
38a72d61d3a114816771f3045f374d56e2194232 |
|
02-Dec-2005 |
Timo Sirainen <tss@iki.fi> |
Added syslog_facility setting to config file.
--HG--
branch : HEAD |
130191cd9b8dfaf988fd28f9a7d52c1bddc24045 |
|
28-Oct-2005 |
Timo Sirainen <tss@iki.fi> |
Ignore SIGALRM signal. We don't want to crash when it happens.
--HG--
branch : HEAD |
ad4c4e2ac7a9c64532723c3345bb2cf4ccb8988f |
|
07-Oct-2005 |
Timo Sirainen <tss@iki.fi> |
Don't crash with SIGHUP/SIGUSR2 if auth_cache isn't used
--HG--
branch : HEAD |
321221ddc2dedc4ad79839770765adc40d311a0d |
|
25-Sep-2005 |
Timo Sirainen <tss@iki.fi> |
Implemented new signal handling framework, which makes handling signals much
easier.
--HG--
branch : HEAD |
db57cf71881ebfb83ab0cf93273d8aa458b41f81 |
|
23-Sep-2005 |
Timo Sirainen <tss@iki.fi> |
Increased count of UNIX socket listener backlogs to 64.
--HG--
branch : HEAD |
82f53ea81671bcc7b9bf24a34b04a4ba2752efd3 |
|
08-Jun-2005 |
Timo Sirainen <tss@iki.fi> |
Auth workers were leaking memory for each request. Fixed also a few invalid
memory accesses at deinitialization.
--HG--
branch : HEAD |
ad49932dae8ba31e07544b66bbc4f4de707a751c |
|
19-Apr-2005 |
Timo Sirainen <tss@iki.fi> |
Allow multiple master connections for a single listener.
--HG--
branch : HEAD |
645397402d1d0c755cd485ecf721b59b6babc874 |
|
19-Apr-2005 |
Timo Sirainen <tss@iki.fi> |
Exit only if all master connections are lost, not only if one of them is.
--HG--
branch : HEAD |
e9503210d3521a6833ed62dc332fc42ffb0e7a13 |
|
07-Mar-2005 |
Timo Sirainen <tss@iki.fi> |
Replaced userdb/passdb settings with blocks so it's possible to give
multiple ones. Plaintext password mechanisms now support handling multiple
passdbs, but others don't yet. Also fixed a few memory leaks.
--HG--
branch : HEAD |
66d2db642fe24d555d113ba463e446b038d476ef |
|
28-Feb-2005 |
Timo Sirainen <tss@iki.fi> |
Restructuring of auth code. Balancer auth processes were a bad idea. Usually
the balancer itself took as much CPU as the actual workers because it acted
as a proxy.
Now auth worker means different thing: they're used to execute blocking
passdb and userdb queries. Currently just MySQL (PAM and checkpassword in
TODO).
--HG--
branch : HEAD |
e5ec130577e21193bfb6200ebc2aa67f1a4e6036 |
|
09-Jan-2005 |
Timo Sirainen <tss@iki.fi> |
fix
--HG--
branch : HEAD |
70905e51a5148bd5613cb04720807177474a2496 |
|
09-Jan-2005 |
Timo Sirainen <tss@iki.fi> |
Changed the way multiple auth processes are handled. It no longer uses a pid
appended to socket name but instead there's a balancer process which
proxies the requests to worker processes.
--HG--
branch : HEAD |
e3376ba426f36e2845ed778879d8aecffef75969 |
|
09-Jan-2005 |
Timo Sirainen <tss@iki.fi> |
Added backlog parameter for net_listen*().
--HG--
branch : HEAD |
657afb33796f8216c568ad813627da89970760be |
|
09-Jan-2005 |
Timo Sirainen <tss@iki.fi> |
Moving code around.
--HG--
branch : HEAD |
9eedd38c2985596fb692dcca62193379d34c4c5b |
|
09-Jan-2005 |
Timo Sirainen <tss@iki.fi> |
Require a valid timestamp in APOP challenge.
--HG--
branch : HEAD |
49e513d090753ccbf95560b2f3a21f081a5b6c51 |
|
08-Jan-2005 |
Timo Sirainen <tss@iki.fi> |
Added auth_request_log_*().
--HG--
branch : HEAD |
97c339398f1aba6f315b55a9b6ee6b020e33bea4 |
|
07-Jan-2005 |
Timo Sirainen <tss@iki.fi> |
Reorganized the code to have less global/static variables.
--HG--
branch : HEAD |
e80203675151ef9d4f3f850cf02041042eb13096 |
|
07-Jan-2005 |
Timo Sirainen <tss@iki.fi> |
Split auth_request* functions from mech.c to auth-request.c
--HG--
branch : HEAD |
0fe87c6c4972ab53eb4827814950d039fbcd5935 |
|
06-Jan-2005 |
Timo Sirainen <tss@iki.fi> |
Added random_fill_weak() and make random_init() always initialize srand()
with a seed from random_fill().
--HG--
branch : HEAD |
ae08adadadc5ad6a6629442b7b01785864cbfa36 |
|
20-Dec-2004 |
Timo Sirainen <tss@iki.fi> |
Fixes for using socket listen { .. } in auth sections.
--HG--
branch : HEAD |
4b058f90f9e8a2c6b2eed275de4eb8cc5195a71d |
|
08-Oct-2004 |
Timo Sirainen <tss@iki.fi> |
Buffer API change: we no longer support limited sized buffers where
writes past limit wouldn't kill the process. They weren't used hardly
anywhere, they could have hidden bugs and the code for handling them was too
complex.
This also changed base64 and hex-binary APIs.
--HG--
branch : HEAD |
cf7421d5fafb9d04a0e8987fb740aa7ab37c614a |
|
21-Sep-2004 |
Timo Sirainen <tss@iki.fi> |
finish the preinit change..
--HG--
branch : HEAD |
dde7827fedc560d1d855046cd1438413224fb4e6 |
|
28-Aug-2004 |
Timo Sirainen <tss@iki.fi> |
Initialize userdb/passdb/password schemes before dropping privileges.
--HG--
branch : HEAD |
6b46a500174ace25494b8f0547283eb60dc13756 |
|
23-Jun-2004 |
Timo Sirainen <tss@iki.fi> |
Dovecot can now connect to externally running dovecot-auth.
--HG--
branch : HEAD |
3685c7c8ca227960360c720b8bd515801a9e5ad6 |
|
31-May-2004 |
Timo Sirainen <tss@iki.fi> |
Delay reporting failed authentications
--HG--
branch : HEAD |
c0a05ba822189ff4f2c86645c38a5a904943192a |
|
30-May-2004 |
Timo Sirainen <tss@iki.fi> |
Added support for password scheme plugins. auth module dir defaults under
module_dir now.
--HG--
branch : HEAD |
d1414c09cf0d58ac983054e2f4e1a1f329272dcf |
|
29-May-2004 |
Timo Sirainen <tss@iki.fi> |
Removed hardcoded mechanism lists. It's now possible to add them
dynamically. Added support for SASL initial response.
--HG--
branch : HEAD |
76213404317a7ed17bec0beadb5137c82785d816 |
|
29-May-2004 |
Timo Sirainen <tss@iki.fi> |
dovecot-auth can now be run by itself, it listens in UNIX sockets specified
in AUTH_SOCKETS environment. Added extra_sockets auth setting which can be
used to do the same thing while started through dovecot master.
--HG--
branch : HEAD |
316dad8277db6575354eba30d3fc7a1c0447c513 |
|
10-May-2004 |
Timo Sirainen <tss@iki.fi> |
Write all logging through master process. Fixes problems with log rotation,
chrooting, etc. Master process also allows max. 10 log messages per second
per child process, it then begins throttling them (eventually making the
child process start blocking on stderr).
--HG--
branch : HEAD |
2a90d8a14b0e7cc1508814bc87d3dfa598ef46a8 |
|
22-Aug-2003 |
Timo Sirainen <tss@iki.fi> |
Moved client side code for auth process handling to lib-auth. Some other login process cleanups.
--HG--
branch : HEAD |
007d354a674fb3ddf49db160cf050cf61270a1a0 |
|
23-May-2003 |
Timo Sirainen <tss@iki.fi> |
Removed I/O priorities. They were pretty much useless and were just getting
in way.
--HG--
branch : HEAD |
0b56ba659328b7186b74c764702ecbe403c98839 |
|
04-Mar-2003 |
Timo Sirainen <tss@iki.fi> |
net_* functions don't anymore set sockets to non-blocking by default.
--HG--
branch : HEAD |
d7ebd3f551d7ce5093ab3c2ae0f3a404fc8fc803 |
|
08-Feb-2003 |
Timo Sirainen <tss@iki.fi> |
Moved login process verbose stuff under verbose_debug.
--HG--
branch : HEAD |
965ed6ea3fc8f7637bd0d159d2fdb283a191ce34 |
|
31-Jan-2003 |
Timo Sirainen <tss@iki.fi> |
Cleanups, LDAP support compiles again and generally looks ok, even if it
doesn't necessarily work :) Works now with new master config.
--HG--
branch : HEAD |
7013075e208bc7aa87257df7d9664c84c7c220f3 |
|
27-Jan-2003 |
Timo Sirainen <tss@iki.fi> |
Removed useless parameters from io_callback_t and timeout_callback_t.
--HG--
branch : HEAD |
25757faf029c369a8318349dafe952e2358df1d8 |
|
27-Jan-2003 |
Timo Sirainen <tss@iki.fi> |
We have now separate "userdb" and "passdb". They aren't tied to each others
in any way, so it's possible to use whatever user database with whatever
password database.
Added "static" userdb, which uses same uid/gid for everyone and generates
home directory from given template. This could be useful with PAM, although
insecure since everyone uses same uid.
Not too well tested, and userdb/passdb API still needs to be changed to
asynchronous for sql/ldap/etc lookups.
--HG--
branch : HEAD |
395cfd9f83ada53f9d434943c062cbe1c80bae2a |
|
21-Jan-2003 |
Timo Sirainen <tss@iki.fi> |
auth_verbose = yes logs now all authentication failures and some other
stuff.
--HG--
branch : HEAD |
a7024a121041f5498d35f36ef56078acbf7a0677 |
|
08-Jan-2003 |
Timo Sirainen <tss@iki.fi> |
Auth and login processes send an "we're ok" reply at the end of
initialization. If the process dies before master receives that reply, it
shutdowns itself. Usually this is because of some configuration error and
it's not nice to start spamming the log files.
--HG--
branch : HEAD |
c0435c854a0e7246373b9752d163095cc4fbe985 |
|
05-Jan-2003 |
Timo Sirainen <tss@iki.fi> |
Naming style changes, finally got tired of most of the typedefs. Also the
previous enum -> macro change reverted so that we don't use the highest bit
anymore, that's incompatible with old indexes so they will be rebuilt.
--HG--
branch : HEAD |
65497fd5c3efa66319a1486addb272413403653a |
|
20-Dec-2002 |
Timo Sirainen <tss@iki.fi> |
Added info_log_file setting and i_info() function to write to it. Default is
the same as failure log. Currently only logged information is client logins.
--HG--
branch : HEAD |
c8ffea67272a9893d7d03860746371eb2490c255 |
|
20-Dec-2002 |
Timo Sirainen <tss@iki.fi> |
Instead of just trusting randomness of authentication cookies between
auth<->master<->login process IPC, master now doesn't accept any cookies
from login process which weren't created by it (identified by PID). When
login process dies, all it's pending cookies are also removed, so I can't
see even a theoretical possiblity anymore for exploited login process to
authenticate as someone else.
Also fixed some int -> unsigned int.
--HG--
branch : HEAD |
aff95d423ca04ac801d55bbb3e29cc18d630f97a |
|
18-Dec-2002 |
Timo Sirainen <tss@iki.fi> |
Drop root privileges earlier. Close syslog more later in imap-master when
forking new processes, so that any errors get logged. Make sure that all
errors show up in log files - use specific exit status codes if we can't
write to log file. Make sure imap and login processes always drop root
privileges even if master process didn't ask for it for some reason.
putenv() wasn't verified to succeed - luckily we never allowed large user
given data there.
--HG--
branch : HEAD |
962d9d2bb349ba5522247fb10a693a8a2c14c33c |
|
01-Dec-2002 |
Timo Sirainen <tss@iki.fi> |
We use close-on-exec flag now to make sure that master process closes the
fds when executing other processes.
--HG--
branch : HEAD |
caffa4b1d81af4d48c1eedba2103f291beb0f62d |
|
26-Nov-2002 |
Timo Sirainen <tss@iki.fi> |
Use more warnings with GCC by default. Fixed several warnings.
--HG--
branch : HEAD |
5a47b70946f83e80c9195d8cb71a616f62feb388 |
|
26-Nov-2002 |
Timo Sirainen <tss@iki.fi> |
net_accept() returns now -2 for fatal failures.
--HG--
branch : HEAD |
d11344383ad0a57379ec435bca21e0378af0b672 |
|
15-Oct-2002 |
Timo Sirainen <tss@iki.fi> |
Initialize random generator before chrooting so it can open /dev/urandom
--HG--
branch : HEAD |
647afe054117804e3e156b46ada4c5bec0ac4c38 |
|
09-Oct-2002 |
Timo Sirainen <tss@iki.fi> |
ioloop_create() takes now pool-parameter. io_buffer_create_mmaped() takes
start_offset parameter instead of getting it with lseek(). Instead of using
offsets to index file, we now use record indexes (first_hole_index, tree
file).
--HG--
branch : HEAD |
868572d42fb8c1e90ea5ab6a5cc5d98f16aec3b6 |
|
26-Aug-2002 |
Timo Sirainen <tss@iki.fi> |
Added log_path and log_timestamp settings to config file. Removed -l command
line option for imap-master.
--HG--
branch : HEAD |
1215bc4d7e747846f282cf710e61f3768e69238d |
|
22-Aug-2002 |
Timo Sirainen <tss@iki.fi> |
s/user_data/context/ and some s/Data/Context/
--HG--
branch : HEAD |
66251e6ab31e5cc153fe5cae608e416dacafe9cd |
|
08-Aug-2002 |
Timo Sirainen <tss@iki.fi> |
Initial revision
--HG--
branch : HEAD |