bcb4e51a409d94ae670de96afb8483a4f7855294 |
|
01-Jan-2018 |
Stephan Bosch <stephan.bosch@dovecot.fi> |
Updated copyright notices to include the year 2018. |
2454dfa32c93c20a8522c6ed42fe057baaac9f9a |
|
01-Jan-2017 |
Stephan Bosch <stephan.bosch@dovecot.fi> |
Updated copyright notices to include the year 2017. |
0f5dc4da3982053036be65190e44bf28a67b1ca2 |
|
02-Nov-2016 |
Timo Sirainen <timo.sirainen@dovecot.fi> |
lib: API change - var_expand*() now returns error string.
This allows callers to fail properly if the format string is invalid. |
d5e68154e67819140e513cbd037eda9c1b929c4e |
|
02-Nov-2016 |
Timo Sirainen <timo.sirainen@dovecot.fi> |
auth: Code cleanup - Move passwd-file extra fields import to its own function.
This will shrink the diff output for the following var_expand() change. |
b4ed649cad1f149bb8fc058eb2eb44f0278a729b |
|
01-Nov-2016 |
Timo Sirainen <timo.sirainen@dovecot.fi> |
auth: If passwd-file can't be read, return tempfail (not user unknown). |
e052c2247f6febbe559a593948ed8ef9f2118435 |
|
29-Mar-2016 |
Timo Sirainen <timo.sirainen@dovecot.fi> |
auth: Disable auth caching for passwd-file
Its caching is usually unnecessary, because the passwd-files are efficiently
in memory already. It's also problematic, because extra_fields can contain
%variables, which can be lookup-dependent. So for example if %{lport} is used
in extra_fields, it would need to be included in the cache key. But because
different variables can be used by different users' extra_fields, there's
really no good way to include all of it in the cache key. |
74674a53a72dab535c61f455b2246ef2797844ea |
|
11-Feb-2016 |
Timo Sirainen <timo.sirainen@dovecot.fi> |
auth: Moved cache_key from passdb_module to auth_passdb.
This is in preparation for the next changeset, which moves
default/override_fields also to auth_passdb. |
02c335c23bf5fa225a467c19f2c063fb0dc7b8c3 |
|
12-Jan-2016 |
Timo Sirainen <timo.sirainen@dovecot.fi> |
global: freshen copyright
git ls-files | xargs perl -p -i -e 's/(\d+)-201[0-5]/$1-2016/g;s/ (201[0-5]) Dovecot/ $1-2016 Dovecot/' |
38ceb710e2bc957a66a75c68957cb87746682a75 |
|
29-May-2015 |
Timo Sirainen <tss@iki.fi> |
auth: Added %{passdb:field} and %{userdb:field} variables
The field expands to either the passdb or userdb extra field.
You can also use %{passdb:field:defaultvalue} where if field doesn't exist,
it's expanded to defaultvalue. Note that an empty value means that the field
still exists and it's not expanded to defaultvalue. |
7cb128dc4cae2a03a742f63ba7afee23c78e3af0 |
|
05-Jan-2015 |
Phil Carmody <phil@dovecot.fi> |
global: freshen copyright
Robomatically:
git ls-files | xargs perl -p -i -e 's/(\d+)-201[0-4]/$1-2015/g;s/ (201[0-4]) Dovecot/ $1-2015 Dovecot/'
Happy 2015 everyone!
Signed-off-by: Phil Carmody <phil@dovecot.fi> |
6135260095e1704ed6edff9d00bdfc043c11429c |
|
17-Apr-2014 |
Timo Sirainen <tss@iki.fi> |
auth: Use special AUTH_SUBSYS_DB/MECH parameters as auth_request_log*() subsystem.
This avoids hardcoded strings all over the place and also allows assigning
the correct passdb/userdb name for log messages generated by generic
passdb/userdb code, which doesn't know exactly where it was called from. |
a8c5a86d183db25a57bf193c06b41e092ec2e151 |
|
04-Feb-2014 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2014. |
83e7db71cc342bb178d03ad6875b581d8c265104 |
|
16-Nov-2013 |
Timo Sirainen <tss@iki.fi> |
auth: Don't crash if passwd-file is used for authentication but it has no passwords. |
5a580c3a38ced62d4bcc95b8ac7c4f2935b5d294 |
|
02-Feb-2013 |
Timo Sirainen <tss@iki.fi> |
Oops :) Update copyrights to 2013 without breaking all .c files. |
cca4ba2a504d70a9fe9fee37f8433997359de52c |
|
02-Feb-2013 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2013. |
5f5870385cff47efd2f58e7892f251cf13761528 |
|
12-Feb-2012 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2012. |
2e37d45867d081db150ab78dad303b9077aea24f |
|
04-Mar-2011 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2011. |
183bea41fa640dc8117f3eb45ff935cd81377a84 |
|
04-Mar-2011 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2011. |
5f21795890064f8e1ebebdff752b67f15ea59e37 |
|
05-Apr-2010 |
Timo Sirainen <tss@iki.fi> |
auth: Fixed using same passwd-file with different username_format settings.
--HG--
branch : HEAD |
f3d506e525a720f214020ca0f989a1966b30edae |
|
13-Mar-2010 |
Timo Sirainen <tss@iki.fi> |
auth: Store args in passdb/userdb_module, so init() doesn't need it as parameter.
--HG--
branch : HEAD |
849969f639a00eab26791db3cb1b66430420c0cd |
|
13-Mar-2010 |
Timo Sirainen <tss@iki.fi> |
auth: passdb/userdb backends no longer know about struct auth_passdb/auth_userdb.
--HG--
branch : HEAD |
1d22eaac93de41319918a1fc6de42bb302e25c1a |
|
13-Mar-2010 |
Timo Sirainen <tss@iki.fi> |
auth: auth_userdb and auth_passdb no longer has pointer to struct auth.
--HG--
branch : HEAD |
e59faf65ce864fe95dc00f5d52b8323cdbd0608a |
|
25-Jan-2010 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2010.
--HG--
branch : HEAD |
c676be2e4d253ce003cf4dfbb13c58ff5d5e4cac |
|
24-Jan-2010 |
Timo Sirainen <tss@iki.fi> |
passwd-file: Give a better error message if args (path) is empty.
--HG--
branch : HEAD |
7bafda1813454621e03615e83d55bccfa7cc56bd |
|
04-Dec-2009 |
Timo Sirainen <tss@iki.fi> |
Removed MEMBER() macro. Require C99 style struct initializer.
--HG--
branch : HEAD |
08d6658a4e2ec8104cd1307f6baa75fdb07a24f8 |
|
05-May-2009 |
Mark Washenberger <none@none> |
Renamed headers to prevent collision if they were flattened on an install.
--HG--
branch : HEAD |
a64adf62fa33f2463a86f990217b0c9078531a40 |
|
28-Jan-2009 |
Timo Sirainen <tss@iki.fi> |
Initial commit for config rewrite.
--HG--
branch : HEAD |
45312f52ff3a3d4c137447be4c7556500c2f8bf2 |
|
06-Jan-2009 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2009.
--HG--
branch : HEAD |
dd93aba1901a457346990f49c54a738947dc7128 |
|
02-Dec-2008 |
Timo Sirainen <tss@iki.fi> |
Fail if trying to give unknown parameters to passdb/userdb.
Also changed error messages to be consistent.
--HG--
branch : HEAD |
d5abbb932a0a598f002da39a8b3326643b1b5efc |
|
24-Sep-2008 |
Timo Sirainen <tss@iki.fi> |
Separate "unknown passdb/userdb X" and "support for X not compiled in" error messages.
--HG--
branch : HEAD |
76b43e4417bab52e913da39b5f5bc2a130d3f149 |
|
01-Jan-2008 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2008.
--HG--
branch : HEAD |
eddd9bf1a1369aea4a2715f6be1137da6d17d293 |
|
05-Dec-2007 |
Timo Sirainen <tss@iki.fi> |
Replaced t_push/t_pop calls with T_FRAME*() macros.
--HG--
branch : HEAD |
89a126810703c666309310d0f3189e9834d70b5b |
|
16-Sep-2007 |
Timo Sirainen <tss@iki.fi> |
Replaced my Copyright notices. The year range always ends with 2007 now.
My name was replaced with "Dovecot authors". In many cases I didn't really
even own the copyright, so this is more correct.
--HG--
branch : HEAD |
43d32cbe60fdaef2699d99f1ca259053e9350411 |
|
16-Sep-2007 |
Timo Sirainen <tss@iki.fi> |
Renamed __attr_*__ to ATTR_*. Renamed __attrs_used__ to ATTRS_DEFINED.
--HG--
branch : HEAD |
4f530f5a08a56bd03ba0762f54a6902f925b8386 |
|
15-Sep-2007 |
Timo Sirainen <tss@iki.fi> |
Added username_format parameter for passwd-file passdb and userdb.
--HG--
branch : HEAD |
55b007ccbad172e4f9448a314f885d046b798d3e |
|
03-Jul-2007 |
Timo Sirainen <tss@iki.fi> |
Support changing default password scheme for passdb passwd-file.
--HG--
branch : HEAD |
b44650b0f48a4b5f0dc240ed836833a00b643b9f |
|
13-May-2007 |
Timo Sirainen <tss@iki.fi> |
All password schemes can now be encoded with base64 or hex. The encoding is
".b64", ".base64" or ".hex" suffix in the scheme, eg. {plain.b64}.
Password scheme verification function can now be set to NULL, in which case
the verification is done by generating a new crypted password from given
plaintext password and comparing it.
--HG--
branch : HEAD |
35136dd2baf8dc30e4e754294ed81ff48e8c1e64 |
|
08-Nov-2006 |
Timo Sirainen <tss@iki.fi> |
Added auth_request_set_credentials() to modify credentials in passdb and
implemented it for SQL passdb. Added passdb_need_set_credentials boolean to
mechanisms to indicate that it's required (OTP will need it). Patch by
Andrey Panin.
--HG--
branch : HEAD |
ffd8f0d6cf8bf85df07bc7fe038ee1ea3fa8be49 |
|
15-Oct-2006 |
Timo Sirainen <tss@iki.fi> |
If auth cache is enabled and %vars are used in passwd-file path, get the
non-username part of the cache key from the path.
--HG--
branch : HEAD |
d94a5aed36736a8e9c2c503afee798702d1d6b0d |
|
24-Jun-2006 |
Timo Sirainen <tss@iki.fi> |
When using non-plaintext authentication with passdb passwd-file we didn't
support extra_fields and we crashed if password scheme wasn't explicitly
specified in the passwd-file.
--HG--
branch : HEAD |
02120b4c0f07d1b691602c51c75bee5c466e4a2f |
|
20-Feb-2006 |
Timo Sirainen <tss@iki.fi> |
If passwd-file is being used as userdb, complain immediately if some entries
don't have userdb information. Also some other cleanups and crashfix for
today's earlier changes.
--HG--
branch : HEAD |
9aa6ee2e488817e0baf53a6742748915d6bdbd1e |
|
20-Feb-2006 |
Timo Sirainen <timo.sirainen@movial.fi> |
Updated passwd-file format to allow specifying any key=value fields. Since the value fields may contain ':' characters, this changes the file format a bit. Previously the last two fields were "flags" and "mail". Flags has been empty for last 3 years however, so the new format is used if the flags field contains something. In that case there is no separate mail field, it can instead be specified by adding userdb_mail=<mail> parameter.
--HG--
branch : HEAD |
6420154390295de70cfd90be8766f2b10f07c1a8 |
|
22-Jan-2006 |
Timo Sirainen <tss@iki.fi> |
Added auth_debug_passwords setting. If it's not enabled, hide all password
strings from logs.
--HG--
branch : HEAD |
229e473f71a96ce61585730b165275a93a311e4e |
|
15-Jan-2006 |
Timo Sirainen <tss@iki.fi> |
If debug is enabled, tell how many users are found from passwd-file whenever
it's read.
--HG--
branch : HEAD |
d5cebe7f98e63d4e2822863ef2faa4971e8b3a5d |
|
14-Jan-2006 |
Timo Sirainen <tss@iki.fi> |
deinit, unref, destroy, close, free, etc. functions now take a pointer to
their data pointer, and set it to NULL. This makes double-frees less likely
to cause security holes.
--HG--
branch : HEAD |
69937f1c3cec930dcb541f414df284d426ac2470 |
|
01-Jan-2006 |
Timo Sirainen <tss@iki.fi> |
Don't crash if password is empty
--HG--
branch : HEAD |
b321df9603081896b70ec44635af96d674a9839a |
|
16-Oct-2005 |
Timo Sirainen <tss@iki.fi> |
Separated passdb_module's interface and the actual data struct. Now it's
possible to have multiple passdbs of same type but with different settings.
--HG--
branch : HEAD |
9fe7632c6d7c1a22623f98a58f497680741f5949 |
|
16-Oct-2005 |
Timo Sirainen <tss@iki.fi> |
Make auth caching work with non-sql/ldap passdbs too.
--HG--
branch : HEAD |
a3dd97fb6d92a89c3de0597fed2d4b044c7aeb84 |
|
16-Oct-2005 |
Timo Sirainen <tss@iki.fi> |
Fixes and cleanups to credentials handling. Also fixed auth caching to work
more correctly in case of internal failures.
--HG--
branch : HEAD |
73bea10ee843c41dccf43f6b90600ecbf24de8f0 |
|
22-Jul-2005 |
Timo Sirainen <tss@iki.fi> |
Added support for variables in passwd-file path.
--HG--
branch : HEAD |
2fbc2a7c65d30e46803195ebb4547176b85c22c7 |
|
12-Jul-2005 |
Timo Sirainen <tss@iki.fi> |
Removed direct config.h including. I'm not sure why it was done before,
probably to reduce compile times a few milliseconds. Ugly anyway..
--HG--
branch : HEAD |
3d370bb6763ac4af4a0d143ad7c93300d5ddff89 |
|
03-Apr-2005 |
Timo Sirainen <tss@iki.fi> |
passdb can now change the username that was used to log in. This is mostly
useful to support case-insensitive username lookups.
--HG--
branch : HEAD |
66d2db642fe24d555d113ba463e446b038d476ef |
|
28-Feb-2005 |
Timo Sirainen <tss@iki.fi> |
Restructuring of auth code. Balancer auth processes were a bad idea. Usually
the balancer itself took as much CPU as the actual workers because it acted
as a proxy.
Now auth worker means different thing: they're used to execute blocking
passdb and userdb queries. Currently just MySQL (PAM and checkpassword in
TODO).
--HG--
branch : HEAD |
e4d34f2fbee451219599d71505594df704093ce3 |
|
26-Feb-2005 |
Timo Sirainen <tss@iki.fi> |
Moved cache handling from sql/ldap-specific code to generic auth-request
code. Did some small optimizations on the way.
--HG--
branch : HEAD |
49e513d090753ccbf95560b2f3a21f081a5b6c51 |
|
08-Jan-2005 |
Timo Sirainen <tss@iki.fi> |
Added auth_request_log_*().
--HG--
branch : HEAD |
517d1e7142d57299c733b30423e35e7e1f8d01d6 |
|
07-Jan-2005 |
Timo Sirainen <tss@iki.fi> |
Make FAIL reply contain "temp" parameter if the authentication failed
because of temporary internal error. Also cleaned up the auth code a bit.
--HG--
branch : HEAD |
1f1e81aab38d833d1c9cdc244c91fd762e0080d4 |
|
06-Dec-2004 |
Timo Sirainen <tss@iki.fi> |
Added name variable for userdb_module and passdb_module and changed their
initialization a bit.
--HG--
branch : HEAD |
dc9bfb7dc057964238e181d3d8b08751527bb08a |
|
21-Oct-2004 |
Timo Sirainen <tss@iki.fi> |
Added simple LRU cache for auth requests. Currently only for sql passdb.
--HG--
branch : HEAD |
08aea01ef9a9d20703e0fcf8618e6195c0037a44 |
|
20-Sep-2004 |
Timo Sirainen <tss@iki.fi> |
Added preinit() call to userdb/passdbs, which is called before dropping
privileges. init() is called after. SQL/LDAP now parses the config file in
preinit, but does the actual connecting only in init(). This fixes LDAP
crashing at startup.
--HG--
branch : HEAD |
0373a24e97602b4c394e93a70b75f45e5869fa51 |
|
31-May-2004 |
Timo Sirainen <tss@iki.fi> |
Logging changes. Make sure we don't write control characters to log and also
log IP address.
--HG--
branch : HEAD |
63c6eefc07085070733e702208101662bc5ccb45 |
|
16-Apr-2003 |
Timo Sirainen <tss@iki.fi> |
passwd-file fixes. passdb ignores now fields after password, so it can work
with shadow-like file.
--HG--
branch : HEAD |
0484952dbf445504d9a0479a8bc8e0a8812f45ef |
|
08-Apr-2003 |
Timo Sirainen <tss@iki.fi> |
default is CRYPT, not DES (which doesn't even exist)
--HG--
branch : HEAD |
ff487c974815bdaa2d05a3b834f4c2c841f4cc34 |
|
18-Feb-2003 |
Timo Sirainen <tss@iki.fi> |
Fix realm usage with DIGEST-MD5. Support generating other password schemes
out of plaintext passwords.
--HG--
branch : HEAD |
473080c7c0d25ddfdf77e7dfa0ba8f73c6c669d5 |
|
18-Feb-2003 |
Timo Sirainen <tss@iki.fi> |
Added default_pass_scheme to LDAP. Support for more password schemes. Merged
password checking code with LDAP and passwd-file, so both support the same
schemes now.
--HG--
branch : HEAD |
7d6389e4053c2dac1fb37180b5756b00785983dc |
|
02-Feb-2003 |
Timo Sirainen <tss@iki.fi> |
auth process fixes, LDAP seems to be working (with the kludge define or
fixed libldap)
--HG--
branch : HEAD |
965ed6ea3fc8f7637bd0d159d2fdb283a191ce34 |
|
31-Jan-2003 |
Timo Sirainen <tss@iki.fi> |
Cleanups, LDAP support compiles again and generally looks ok, even if it
doesn't necessarily work :) Works now with new master config.
--HG--
branch : HEAD |
22535a9e685e29214082878e37a267157044618e |
|
27-Jan-2003 |
Timo Sirainen <tss@iki.fi> |
Async userdb and passdb interface.
--HG--
branch : HEAD |
25757faf029c369a8318349dafe952e2358df1d8 |
|
27-Jan-2003 |
Timo Sirainen <tss@iki.fi> |
We have now separate "userdb" and "passdb". They aren't tied to each others
in any way, so it's possible to use whatever user database with whatever
password database.
Added "static" userdb, which uses same uid/gid for everyone and generates
home directory from given template. This could be useful with PAM, although
insecure since everyone uses same uid.
Not too well tested, and userdb/passdb API still needs to be changed to
asynchronous for sql/ldap/etc lookups.
--HG--
branch : HEAD |