lib: Add restrict_access_flags enum to use with restrict_access[_by_env]() Swap parameter locations in the functions to make sure plugins are updated to use the new api.

global: don't cast NULL to void * NULL is guaranteed to be a void * thanks to dd6043c05e32a8e8db1233ed711a2c74d1477a89.

Updated copyright notices to include the year 2018.

director: Show number of incoming USERs/sec in ps title

director: Limit max kicking count

director: Add kick_callback to director This callback gets called whenever director has performed a kick.

director: Allow proxy-notify to optionally be a socket Dovecot isn't using this currently, but it can be useful if external services want to send notifications.

director: Support multiple proxy-notify connections

director: Show in process title how many users are being kicked.

director: Show in process title how many requests are being delayed.

global: Use PRI* macros and %zu instead of casting

global: start relying on timeout_remove(NULL) being a no-op Cleanup performed with the following semantic patch: @@ expression E; @@ - if (E != NULL) { - timeout_remove(&E); - } + timeout_remove(&E);

director: Avoid "ring sync timeout" errors when all backends are down doveadm commands were failing with it. Also pending request failures were logged as failing due to ring sync timeout, instead of because no hosts.

director: Log info line for every incoming/outgoing connection This can help with debugging problems.

director: doveadm HOST-* commands now wait for ring sync before returning OK This should make it easier for tests and maybe for scripts in general, so they won't think the command failed when it just takes a while to finish.

Updated copyright notices to include the year 2017.

director: Keep per-tag directory

director: Avoid assert-crash at deinit if user moves are still being added. Fixes: Panic: file user-directory.c: line 312 (user_directory_deinit): assertion failed: (array_count(&dir->iters) == 0)

director: Code cleanup - global director is no longer needed.

director: HOST-RESET-USERS moves users more slowly now. By default only 100 users can be moved in parallel. This can be overridden with HOST-RESET-USERS parameter. This delaying is especially useful when director_flush_socket is used to avoid huge floods to the script service. Even without the socket it's still good for avoiding unnecessary load spikes when all users are kicked at once and they reconnect back at the same time.

director: Show in process title how many users are being moved.

director: Call state_change_callback on user move timeout.

director: Fix shutdown_clients=no to not break The director process must shut down even with with shutdown_clients=no. Otherwise the two director processes will try to keep competing with each others and log errors like: director: Warning: Director 10.0.0.123:9090/right disconnected us with reason: Replacing with new incoming connection director: Warning: Director 10.0.0.123:9090/right disconnected us with reason: Replacing with 10.0.0.124:9090

director: Throttle user move/kill failure errors after 100/sec. If it happened to a lot of users, they can take a lot of space in logs.

director: Compiler warning fix

director: Remove director_doveadm_port the flag is obsoleted by inet_listener doveadm name. And listener_get_socket_type_fallback() will fallback to token ring when socket name is missing.

global: freshen copyright git ls-files | xargs perl -p -i -e 's/(\d+)-201[0-5]/$1-2016/g;s/ (201[0-5]) Dovecot/ $1-2016 Dovecot/'

Changed type of internet port values to in_port_t everywhere. Created special SET_IN_PORT setting type for internet port values. Created net_str2port() for parsing internet port values. Removed several atoi() invocations in the process.

director: UNIX auth sockets were wrongly detected as doveadm or ring sockets. A workaround would be to use login/director-auth socket name instead of login/director.

director: Added "authreply" socket type. This allows defining a socket, which receives auth replies. Director then adds the "host" field to it if it's missing and returns back the original string. The idea is that eventually a director ring could be running independently from Dovecot proxies.

director: Removed accidentally committed debug log message

director: Cleanup for director socket type configuration. It's now possible to use any type of a socket for inet listeners by specifying the name for the listener. The available types are: auth (default), userdb, ring (= director<->director connection), admin/doveadm. This change should be backwards compatible with previous configuration. This setting also deprecates director_doveadm_port setting.

director: Include useful statistics in process title.

global: freshen copyright Robomatically: git ls-files | xargs perl -p -i -e 's/(\d+)-201[0-4]/$1-2015/g;s/ (201[0-4]) Dovecot/ $1-2015 Dovecot/' Happy 2015 everyone! Signed-off-by: Phil Carmody <phil@dovecot.fi>

director: Added support for backend cluster "tags". This allows using a single director ring for multiple backend clusters. By default everything has an empty tag. A passdb lookup can return "director_tag" field containing the wanted tag name. If there aren't any backend servers with the wanted tag, it's treated the same as if there aren't any backend servers available (= wait for 30 secs for a backend and then return temporary failure). Tags can be added to configuration by adding @tag suffix to IPs/hosts. For example: director_mail_servers = 10.0.0.100-10.0.0.110@name1 10.0.0.120@name2 "doveadm director add" can also add tags either with @tag suffix or with -t parameter. "doveadm director status user@domain" requires giving the user's correct tag with -t parameter or the results won't be correct (empty tag's results are shown). Tags can't currently be changed for an existing host without removing it first.

director: Don't restart request timeout when director state changes. If the state keeps changing all the time we'll never return timeouts for the requests.

Updated copyright notices to include year 2014.

Call master_service_init_finish() only after all of the initialization is done. This way if the init crashes, the master process will throttle a buggy service.

Oops :) Update copyrights to 2013 without breaking all .c files.

Updated copyright notices to include year 2013.