auth: passdb-cache - Verify credentials with worker when enabled

Updated copyright notices to include the year 2018.

global: Use PRI* macros and %zu instead of casting

auth: cache: don't log password mismatch twice If auth cache is enabled and the last auth was successful dovecot assumes the password has been changed and invalidates the cache which results in double logging of the same password mismatch. This also applies to expired negative cache entries.

Updated copyright notices to include the year 2017.

global: Replaced t_strsplit_tab() calls with t_strsplit_tabescaped() This is useful especially in auth code to support LFs in extra fields. Other pieces of code were also tab-escaping strings, but never unescaping them. Usually it didn't matter, because nobody would use the escaped characters. Still, the code wasn't exactly behaving correctly. One downside to this change is that it's now possible to pass through TABs, CRs and LFs through the various protocols. In theory this shouldn't cause any problems, but combined with other bugs this could trigger some security problems.

auth: If auth_stats=yes, send statistics to stats process.

auth: Small code cleanup to auth cache - deduplicate code. No functional changes.

auth: Minor code cleanup - fix parameter type

global: freshen copyright git ls-files | xargs perl -p -i -e 's/(\d+)-201[0-5]/$1-2016/g;s/ (201[0-5]) Dovecot/ $1-2016 Dovecot/'

Remove now-unnecessary direct stdlib.h #includes.

global: freshen copyright Robomatically: git ls-files | xargs perl -p -i -e 's/(\d+)-201[0-4]/$1-2015/g;s/ (201[0-4]) Dovecot/ $1-2015 Dovecot/' Happy 2015 everyone! Signed-off-by: Phil Carmody <phil@dovecot.fi>

auth: Use special AUTH_SUBSYS_DB/MECH parameters as auth_request_log*() subsystem. This avoids hardcoded strings all over the place and also allows assigning the correct passdb/userdb name for log messages generated by generic passdb/userdb code, which doesn't know exactly where it was called from.

Updated copyright notices to include year 2014.

auth: Cache master user logins also.

auth: Use a common auth_request_log_unknown_user() for logging "unknown user" entries.

Oops :) Update copyrights to 2013 without breaking all .c files.

Updated copyright notices to include year 2013.

Use t_strsplit_tab() wherever possible

auth: If auth_cache_size is larger than process VSZ limit, log a warning.

Updated copyright notices to include year 2012.