bcb4e51a409d94ae670de96afb8483a4f7855294 |
|
01-Jan-2018 |
Stephan Bosch <stephan.bosch@dovecot.fi> |
Updated copyright notices to include the year 2018. |
ad3e5fb08578161731085cfc025659753d2682cb |
|
28-Nov-2017 |
Stephan Bosch <stephan.bosch@dovecot.fi> |
imap-login: Properly recognize an empty SASL initial response.
Pass only the empty string to the auth service and not "=". |
c147bff818798a979d93537f72f5c1f68f5d5ba8 |
|
24-Nov-2017 |
Aki Tuomi <aki.tuomi@dovecot.fi> |
global: Use t_buffer_create
sed -i -e 's/buffer_create_dynamic(pool_datastack_create(), */t_buffer_create(/g' |
2454dfa32c93c20a8522c6ed42fe057baaac9f9a |
|
01-Jan-2017 |
Stephan Bosch <stephan.bosch@dovecot.fi> |
Updated copyright notices to include the year 2017. |
efe78d3ba24fc866af1c79b9223dc0809ba26cad |
|
24-Dec-2016 |
Stephan Bosch <stephan.bosch@dovecot.fi> |
global: Replaced all instances of memset(p, 0, sizeof(*p)) with the new i_zero() macro.
Used the following script:
C_FILES=`git ls-files *.c`
H_FILES=`git ls-files *.h`
for F in "$C_FILES $H_FILES"; do
echo "$F"
perl -p -i -e 's/safe_memset\(&\(?([^,]*)\)?,\s*0,\s*sizeof\(\g1\)\)/i_zero_safe(&$1)/g' $F
perl -p -i -e 's/safe_memset\(([^,]*),\s*0,\s*sizeof\(\*\g1\)\)/i_zero_safe($1)/g' $F
perl -p -i -e 's/memset\(&\(?([^,]*)\)?,\s*0,\s*sizeof\(\g1\)\)/i_zero(&$1)/g' $F
perl -p -i -e 's/memset\(([^,]*),\s*0,\s*sizeof\(\*\g1\)\)/i_zero($1)/g' $F
done |
d2fd204b303ef4990eecd1ad6f32d2829f241c57 |
|
02-Nov-2016 |
Stephan Bosch <stephan@dovecot.fi> |
imap-login: Adjusted IMAP AUTHENTICATE command to return CONTACTADMIN and EXPIRED response codes when appropriate. |
8ac6623677005256bf99ab33a2ed98c69c1d656c |
|
02-Nov-2016 |
Stephan Bosch <stephan.bosch@dovecot.fi> |
auth,login-common: Added result code for invalid base64-encoded response data. |
04eb0abcf8f8b0c014499b5c5bae89484553613f |
|
02-Nov-2016 |
Stephan Bosch <stephan.bosch@dovecot.fi> |
login-common: Added result codes for mechanism-related failures. |
f32d0295c90ed810889504cdfa5e1a25a415f65f |
|
02-Nov-2016 |
Stephan Bosch <stephan.bosch@dovecot.fi> |
login-common: Added result code for a nologin code from the auth service. |
529944a3554da75c2e6231a25fe489d815519b22 |
|
02-Nov-2016 |
Stephan Bosch <stephan.bosch@dovecot.fi> |
login-common: Added result code for password-expired authentication failure. |
f0339f522dc9c8e2e8a29ef9a3f937c431c6bd1b |
|
06-Jun-2016 |
Timo Sirainen <timo.sirainen@dovecot.fi> |
global: Use only explicit int -> bool conversions
These were checked with a patched clang. |
66134fbce11778241ca9f8458ee2a0488a05bde0 |
|
16-May-2016 |
Stephan Bosch <stephan@rename-it.nl> |
lib-imap: Started using struct uri_host in struct imap_url. |
f883bf3eff62f5d27df5ee9ee664edc38a77937f |
|
16-May-2016 |
Stephan Bosch <stephan@rename-it.nl> |
uri-util: Removed have_port and have_host_ip flags.
Presence of port can be tested with port != 0.
Presence of IP can be tested with ip->family != 0. |
0af9ef2e9bb71a426bba236e74ceec30be699fb7 |
|
15-Jan-2016 |
Timo Sirainen <timo.sirainen@dovecot.fi> |
imap-login: Renamed client.[ch] to imap-login-client.[ch]
This allows installing the imap-login-client.h without conflicting. |
02c335c23bf5fa225a467c19f2c063fb0dc7b8c3 |
|
12-Jan-2016 |
Timo Sirainen <timo.sirainen@dovecot.fi> |
global: freshen copyright
git ls-files | xargs perl -p -i -e 's/(\d+)-201[0-5]/$1-2016/g;s/ (201[0-5]) Dovecot/ $1-2016 Dovecot/' |
63a5701073286e20da09b14b118747fbac699506 |
|
14-Oct-2015 |
Timo Sirainen <tss@iki.fi> |
imap/pop3-login: If LOGIN/USER is used with plaintext auth disabled, remember the username for logging.
It's still useful to see the username that was sent in the logout message.
This won't work for AUTHENTICATE PLAIN, but hopefully the clients that use
it understand the LOGINDISABLED capability better. |
814bf67459ad405a157af0b8940602024d7fadfe |
|
23-Sep-2015 |
Teemu Huovila <teemu.huovila@dovecot.fi> |
Remove now-unnecessary direct stdlib.h #includes. |
0a9d52be3f50f9440e59c2797ad440e37b3ed8f6 |
|
29-Jun-2015 |
Timo Sirainen <tss@iki.fi> |
imap/pop3-login: If auth failure reason already begins with [resp-code], don't prefix it with another one. |
7cb128dc4cae2a03a742f63ba7afee23c78e3af0 |
|
05-Jan-2015 |
Phil Carmody <phil@dovecot.fi> |
global: freshen copyright
Robomatically:
git ls-files | xargs perl -p -i -e 's/(\d+)-201[0-4]/$1-2015/g;s/ (201[0-4]) Dovecot/ $1-2015 Dovecot/'
Happy 2015 everyone!
Signed-off-by: Phil Carmody <phil@dovecot.fi> |
a8c5a86d183db25a57bf193c06b41e092ec2e151 |
|
04-Feb-2014 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2014. |
5a580c3a38ced62d4bcc95b8ac7c4f2935b5d294 |
|
02-Feb-2013 |
Timo Sirainen <tss@iki.fi> |
Oops :) Update copyrights to 2013 without breaking all .c files. |
cca4ba2a504d70a9fe9fee37f8433997359de52c |
|
02-Feb-2013 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2013. |
bdd36cfdba3ff66d25570a9ff568d69e1eb543cf |
|
03-Oct-2012 |
Timo Sirainen <tss@iki.fi> |
Renamed network.[ch] to net.[ch].
The function prefixes already started with net_ instead of network_.
And icecap wants to use network.h for other purpose. :) |
cc77966cac89d1e44031d4b40d76628d273e7732 |
|
14-Sep-2012 |
Stephan Bosch <stephan@rename-it.nl> |
Fixes IMAP LOGIN REFERRAL to properly encode IMAP URL. |
9f627b360ed38fdc54cb02ec5e67246c3f0d5b0f |
|
12-Feb-2012 |
Timo Sirainen <tss@iki.fi> |
login-common API made more extensible for different kinds of protocols.
Patch by Stephan Bosch. |
5f5870385cff47efd2f58e7892f251cf13761528 |
|
12-Feb-2012 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2012. |
2e78f05b11df23ec2731afaf8f19d5b5240cb29f |
|
21-Jan-2012 |
Timo Sirainen <tss@iki.fi> |
imap-login: Fixed handling second AUTHENTICATE command when the first one failed. |
decb23442f9e6cd5c4845a9cb162029b8c6d5f0f |
|
19-Jan-2012 |
Timo Sirainen <tss@iki.fi> |
imap-login: Handle SASL-IR without overflowing master_auth_request's buffer. |
0a5a9ccc0aebf3cabfb913d8088f2a7d322b497f |
|
10-Jan-2012 |
Timo Sirainen <tss@iki.fi> |
imap/pop3-login: Include hostname and timestamp in "temporary auth failure" message. |
2e37d45867d081db150ab78dad303b9077aea24f |
|
04-Mar-2011 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2011. |
183bea41fa640dc8117f3eb45ff935cd81377a84 |
|
04-Mar-2011 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2011. |
71bf346cddcec75a7394b2acf6f954808383aa4c |
|
02-Aug-2010 |
Timo Sirainen <tss@iki.fi> |
imap: imap_capability = +foo only adds new capabilities instead of replacing everything. |
c2fbbf7515aa419dc8b2d62a3c2bb0471d51a391 |
|
05-Apr-2010 |
Timo Sirainen <tss@iki.fi> |
lib-imap: Changed imap_arg accessing APIs.
The new one is easier for both coders and static analyzers.
--HG--
branch : HEAD |
e59faf65ce864fe95dc00f5d52b8323cdbd0608a |
|
25-Jan-2010 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2010.
--HG--
branch : HEAD |
46552a931924c2d743f045e95b08c3ce6beda91a |
|
02-Jan-2010 |
Timo Sirainen <tss@iki.fi> |
login-common: Renamed common.h to login-common.h
--HG--
branch : HEAD |
660b99a7059824676b2b8d6f79b8e15d47df25a2 |
|
10-Nov-2009 |
Timo Sirainen <tss@iki.fi> |
*-login: Removed per-connection auth failure penalties. Trust auth server to do it.
--HG--
branch : HEAD |
d3a7d023b47d2a137f01109e7b38702dca3f11d3 |
|
10-Aug-2009 |
Timo Sirainen <tss@iki.fi> |
*-login: Moved ssl=required checking to login-common.
--HG--
branch : HEAD |
e248fe370c4047cee921a91b48edc37944ab0526 |
|
10-Aug-2009 |
Timo Sirainen <tss@iki.fi> |
*-login: Moved most of the common code to login-common.
--HG--
branch : HEAD |
00fa8dcbc66f56daa737487c9dec7166c37de79e |
|
09-Aug-2009 |
Timo Sirainen <tss@iki.fi> |
*-login: Use a common client_send_line() API.
--HG--
branch : HEAD |
a19c6b87b303dd99c26598949ce71c040e10e353 |
|
09-Aug-2009 |
Timo Sirainen <tss@iki.fi> |
*-login: Moved common code to sasl_server_get_advertised_mechs().
--HG--
branch : HEAD |
74ee5590487e89b25dffb58560ab1fea79fc21d9 |
|
10-Jul-2009 |
Timo Sirainen <tss@iki.fi> |
login processes: Auth code cleanups. Custom IMAP auth errors now have [ALERT] prefix.
This should make them visible in more clients.
--HG--
branch : HEAD |
07e7066e0f40899181a195c247a08639366d7567 |
|
17-Jun-2009 |
Timo Sirainen <tss@iki.fi> |
imap-login: Using CAPABILITY command after STARTTLS shouldn't trigger CAPABILITY pushing workaround.
--HG--
branch : HEAD |
bbba7d0fce1b6ce5baa2d7ef946eb1b63e2ab518 |
|
28-May-2009 |
Timo Sirainen <tss@iki.fi> |
imap-login now advertises only pre-login capabilities.
If client had used CAPABILITY command before logging in, untagged CAPABILITY
is sent to client in the hope that client understands this. This change
could get reverted if it breaks too many clients.
--HG--
branch : HEAD |
9964d0c6260406ec00ec1fa2f03c506eec1b74f4 |
|
26-May-2009 |
Timo Sirainen <tss@iki.fi> |
imap: Don't send "Waiting for auth process" if it's the client that's waiting on AUTHENTICATE.
--HG--
branch : HEAD |
97db4761382024093f441e4bc78ba8b6a056504d |
|
15-May-2009 |
Timo Sirainen <tss@iki.fi> |
login processes: Added initial support for per-connection configuration.
--HG--
branch : HEAD |
e95dba8921087afebb8a92c592af3b8ca22ae796 |
|
29-Apr-2009 |
Timo Sirainen <tss@iki.fi> |
imap/pop3 proxy: Support SSL/TLS connections to remote servers.
passdb can return ssl=yes, ssl=any-cert and starttls options.
--HG--
branch : HEAD |
e3a838c80f54f024115fade93c6c87a0998f1fab |
|
07-Apr-2009 |
Timo Sirainen <tss@iki.fi> |
imap-login: Use [resp-codes] to figure out when to replace remote's auth failed message with ours.
--HG--
branch : HEAD |
a64adf62fa33f2463a86f990217b0c9078531a40 |
|
28-Jan-2009 |
Timo Sirainen <tss@iki.fi> |
Initial commit for config rewrite.
--HG--
branch : HEAD |
f4a00030e7536266abbc52a882475bbc96decc3c |
|
15-Jan-2009 |
Timo Sirainen <tss@iki.fi> |
Renamed "ssl_disable" setting to "ssl". Added support for ssl=required.
--HG--
branch : HEAD |
45312f52ff3a3d4c137447be4c7556500c2f8bf2 |
|
06-Jan-2009 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2009.
--HG--
branch : HEAD |
8372fc7efb6d64dff2e5f55fb4a3822c56869cfe |
|
21-Dec-2008 |
Timo Sirainen <tss@iki.fi> |
imap/pop3-login: Cleaned up proxying code. Don't disconnect client on proxy failures.
Log proxy failures as errors.
--HG--
branch : HEAD |
3557b4f31edaa9f9ae87f89e34b286cbc5c6992f |
|
19-Dec-2008 |
Timo Sirainen <tss@iki.fi> |
login: Reset idle timeout only when input is actually read from client.
This prevents client from just sending lots of failed authentication
attempts and then doing nothing for hours.
--HG--
branch : HEAD |
e5dec382163b476bed16dbf7eb470913a9bbdbe1 |
|
19-Dec-2008 |
Timo Sirainen <tss@iki.fi> |
Increase failed login's reply delay by 5 seconds for each failure.
Don't add any delays if passdb returned nodelay extra field.
Based on patch by Apple.
--HG--
branch : HEAD |
276165201f2c553b70c768a1746cdc60744141c6 |
|
17-Dec-2008 |
Timo Sirainen <tss@iki.fi> |
Mention SSL/TLS in "plaintext auth disallowed" error.
--HG--
branch : HEAD |
ccef83820a01bb37ad48653a05a9c5aa6560826a |
|
14-Dec-2008 |
Timo Sirainen <tss@iki.fi> |
imap/pop3 proxy: Support master user logins.
--HG--
branch : HEAD |
71015434894b40355dd56c1f9571aaeb6bcb1f99 |
|
13-Dec-2008 |
Timo Sirainen <tss@iki.fi> |
Don't crash if trying to use an unsupported auth mechanism.
--HG--
branch : HEAD |
708ea1c397d89586af66c97d74c907f3f2b95134 |
|
15-Nov-2008 |
Timo Sirainen <tss@iki.fi> |
Give a different error message if authentication succeeds but authorization fails.
Added a new "authz" parameter for FAIL result in the auth protocol for this.
--HG--
branch : HEAD |
571c3f92f42194c440c161356c04687fc970ea11 |
|
15-Nov-2008 |
Timo Sirainen <tss@iki.fi> |
Moved imap-resp-codes to macros.
--HG--
branch : HEAD |
4321f6c969e7b8f6b243ff5bb6b8d297921676f6 |
|
15-Nov-2008 |
Timo Sirainen <tss@iki.fi> |
Implemented imap-response-codes draft.
--HG--
branch : HEAD |
4e8f94cb8ef0fd0633322a0eced476bf17b16c03 |
|
29-Oct-2008 |
Timo Sirainen <tss@iki.fi> |
login: If client pipelines multiple failing auth commands, don't stop handling after two.
--HG--
branch : HEAD |
c0f37aed3f5cb883d1ac8a20a111724c4a69faa4 |
|
26-Oct-2008 |
Timo Sirainen <tss@iki.fi> |
Login prcesses: If auth_debug=yes, don't warn about "user" parameter being unknown.
--HG--
branch : HEAD |
cde374030f07abaec4f898a1afe67de1f3dbded0 |
|
25-Oct-2008 |
Timo Sirainen <tss@iki.fi> |
Login processes: If auth_debug=yes, log about received unknown passdb extra fields.
--HG--
branch : HEAD |
38318f5e82662615cd88e99e398efe4a630ce020 |
|
19-Oct-2008 |
Timo Sirainen <tss@iki.fi> |
Login process: Log auth failure reasons better in disconnect message.
For example if client certs are required it now logs if the cert wasn't sent
or if the cert was invalid.
--HG--
branch : HEAD |
7753eaa6a4275e074b4ce8428b85d9d04fc67f31 |
|
20-Jun-2008 |
Timo Sirainen <tss@iki.fi> |
Send login command OK reply in IMAP/POP3 process.
--HG--
branch : HEAD |
cd94aeaa294f7cc507206b4b2075852f00e14d61 |
|
20-Jun-2008 |
Timo Sirainen <tss@iki.fi> |
If commands are pipelined after the login command, pass them to the
IMAP/POP3 process so it can process the command instead of discarding it.
--HG--
branch : HEAD |
40963c8cb4b00733d5815f9a4432b267d7b496af |
|
21-Jun-2008 |
Timo Sirainen <tss@iki.fi> |
Removed login_greeting_capability setting. Instead now a minimal pre-login
capability list is sent in the banner. CAPABILITY command still returns a
full list. If CAPABILITY command wasn't used, the full capability list is
sent in LOGIN/AUTHENTICATE tagged OK reply.
--HG--
branch : HEAD |
afd0a4b74b14ba4d01175ab13fc5eeedff1e8b06 |
|
26-Mar-2008 |
Timo Sirainen <tss@iki.fi> |
Log clearly with "auth failed, # attempts" if user gets disconnected before
logging in.
--HG--
branch : HEAD |
483c5d48c62f10b326607aa2286d1ffd648fa0e8 |
|
10-Mar-2008 |
Timo Sirainen <tss@iki.fi> |
If we sent client "waiting for auth process" message, we crashed later.
--HG--
branch : HEAD |
da65cea107a78c01f1a7b97cb94f933be44c76cd |
|
06-Jan-2008 |
Timo Sirainen <tss@iki.fi> |
Fixed assert-crash when login fails to proxied server.
--HG--
branch : HEAD |
d46e511d179ad29bb91b87023363ae77e5a6c692 |
|
06-Jan-2008 |
Timo Sirainen <tss@iki.fi> |
If proxying tries to loop to itself, fail the login and log an error.
--HG--
branch : HEAD |
afe367fbbb7e1c7b3d1f82eae517bfee80a00738 |
|
06-Jan-2008 |
Timo Sirainen <tss@iki.fi> |
Assert-crashfix
--HG--
branch : HEAD |
8e4e0f49d4221d506d9bf7fe6ce224fae3e34450 |
|
03-Jan-2008 |
Timo Sirainen <tss@iki.fi> |
Use separate per-client timeouts instead of going through all clients in one
timeout.
--HG--
branch : HEAD |
76b43e4417bab52e913da39b5f5bc2a130d3f149 |
|
01-Jan-2008 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2008.
--HG--
branch : HEAD |
02ccba3d3be96444abd15b5254864c9151bbeb30 |
|
11-Dec-2007 |
Timo Sirainen <tss@iki.fi> |
Instead of logging only "Aborted login", log also if client tried to use
plaintext auth, or if not log the number of authentication attempts.
--HG--
branch : HEAD |
6a3487123ea51203c01b99af3e309a07d3444a0f |
|
18-Nov-2007 |
Timo Sirainen <tss@iki.fi> |
Disable processing input while it's not expected, otherwise we could get
there and crash while master is processing the login. Also allow client to
send the SASL data within the same IP packet as the AUTH/AUTHENTICATE
command without hanging.
--HG--
branch : HEAD |
cf8fbfe121e7b09d4ca9088ea3b32eec5dc48dd6 |
|
22-Sep-2007 |
Timo Sirainen <tss@iki.fi> |
If proxy points to the same host/port/user combination as we currently have,
don't create an infinite connection loop.
--HG--
branch : HEAD |
89a126810703c666309310d0f3189e9834d70b5b |
|
16-Sep-2007 |
Timo Sirainen <tss@iki.fi> |
Replaced my Copyright notices. The year range always ends with 2007 now.
My name was replaced with "Dovecot authors". In many cases I didn't really
even own the copyright, so this is more correct.
--HG--
branch : HEAD |
f3774edbb473e89aab306c9e5157ddbdebea2c64 |
|
08-Aug-2007 |
Timo Sirainen <tss@iki.fi> |
AUTHENTICATE "" command should return BAD instead of silence.
--HG--
branch : HEAD |
f53759c12ba7f3a80c9fe277bea4f781f862a3f1 |
|
30-Jun-2007 |
Timo Sirainen <tss@iki.fi> |
Initial implementation for mail_max_user_connections setting.
--HG--
branch : HEAD |
f1e9611e93dcb3b745c1904029084fa81644e1b3 |
|
29-Jun-2007 |
Timo Sirainen <tss@iki.fi> |
Added more consts to imap-parser API
--HG--
branch : HEAD |
99d0240459a9c353a79ebd045ed7464dd1bce084 |
|
27-Mar-2007 |
Timo Sirainen <tss@iki.fi> |
Potential crashfix
--HG--
branch : HEAD |
05a68676cfad7991e12467516a00d078dbde6f42 |
|
20-Feb-2007 |
Timo Sirainen <tss@iki.fi> |
If authentication failed but it still returns proxy, don't do the proxying.
--HG--
branch : HEAD |
62ba819bc24e7eb197684998ccd4aa1ddd130aad |
|
16-Feb-2007 |
Timo Sirainen <tss@iki.fi> |
If authentication fails and we've already destroyed the client, don't go
io_add()ing the client anywhere.
--HG--
branch : HEAD |
c714b6da7fb5712fca543b65518eb910f80fa9e3 |
|
20-Dec-2006 |
Timo Sirainen <tss@iki.fi> |
"Plaintext authentication disabled" -> "Plaintext authentication disallowed
on non-secure connections"
--HG--
branch : HEAD |
2cfe9983ce7a6280636ee12beccc2e865111967b |
|
15-Dec-2006 |
Timo Sirainen <tss@iki.fi> |
Replaced void *context from a lot of callbacks with the actual context
type. Also added/fixed some context type checks.
--HG--
branch : HEAD |
4228965092f59f5f3db69b8c636f89fae704f563 |
|
03-Dec-2006 |
Timo Sirainen <tss@iki.fi> |
Changed the service name from uppercase IMAP/POP3 to lowercase imap/pop3 so
they're consistent with smtp/deliver.
--HG--
branch : HEAD |
14fabfe6ffd53d2cd27df5f55742e9bc0f56d512 |
|
12-Nov-2006 |
Timo Sirainen <tss@iki.fi> |
Fixed potential problems with client disconnecting while master was handling
the login.
--HG--
branch : HEAD |
feb665db52583259a1f42037c6e8a22852aa8889 |
|
07-Nov-2006 |
Timo Sirainen <tss@iki.fi> |
Crashfixes and more asserts. Mostly related to use of AUTHENTICATE/AUTH
commands.
--HG--
branch : HEAD |
4a3ee6d196ccdaa8d2de34a24ee014ee2b701b27 |
|
17-Jun-2006 |
Timo Sirainen <tss@iki.fi> |
Don't crash if the initial response isn't given for AUTHENTICATE..
--HG--
branch : HEAD |
277e6433f35ede932a5aaf0e868bd99539dfe8eb |
|
17-Jun-2006 |
Timo Sirainen <tss@iki.fi> |
Added support for SASL-IR extension.
--HG--
branch : HEAD |
f9277a2944cb32e8f76f5b684ee96b2ea8874170 |
|
05-Jun-2006 |
Timo Sirainen <tss@iki.fi> |
IMAP: Reply with tagged BAD if authentication is aborted because client sent
"*" or something else that was a client error.
If authentication failed for any reason, the error message was always
"Authentication failed". In case of client errors or if auth process gave
an error message, it should have been that instead.
--HG--
branch : HEAD |
549b6e0f16c1d4102660473cbb7f5afc28b4e055 |
|
28-Jan-2006 |
Timo Sirainen <tss@iki.fi> |
If client disconnected while we were trying to send authentication
continuation to it, we crashed.
--HG--
branch : HEAD |
d5cebe7f98e63d4e2822863ef2faa4971e8b3a5d |
|
14-Jan-2006 |
Timo Sirainen <tss@iki.fi> |
deinit, unref, destroy, close, free, etc. functions now take a pointer to
their data pointer, and set it to NULL. This makes double-frees less likely
to cause security holes.
--HG--
branch : HEAD |
6ef7e31619edfaa17ed044b45861d106a86191ef |
|
13-Jan-2006 |
Timo Sirainen <tss@iki.fi> |
Added "bool" type and changed all ints that were used as booleans to bool.
--HG--
branch : HEAD |
9439bed2f07d6475febd8a247cd2f0990fb32a13 |
|
14-May-2005 |
Timo Sirainen <tss@iki.fi> |
Added configurable logging for login process. Added configurable pop3 logout
string. Based on a patch by Andrey Panin.
--HG--
branch : HEAD |
e2722342d7257d79cfe01f3cc154e29f308a3fcb |
|
07-Jan-2005 |
Timo Sirainen <tss@iki.fi> |
If authentication failed because of temporary failure, show different error
message to clients.
--HG--
branch : HEAD |
f30577ff7cf29858f1878abe963b4f40a436434f |
|
19-Oct-2004 |
Timo Sirainen <tss@iki.fi> |
More smart IMAP and POP3 proxies. Now if remote login fails, it just
destroys the proxy and allows trying another username which can go elsewhere.
Also now replies with the same old "Authentication failed" error message
instead of showing remote server's failure message.
--HG--
branch : HEAD |
ba90e657bc68a72ab3b3021e2f4a874fac9965ba |
|
18-Oct-2004 |
Timo Sirainen <tss@iki.fi> |
Added IMAP and POP3 proxying support.
--HG--
branch : HEAD |
0442399c3ad313d6f5267c182ddb9012e525941d |
|
18-Oct-2004 |
Timo Sirainen <tss@iki.fi> |
Implemented support for LOGIN-REFERRALS using "referral" and "reason"
parameters from auth server.
--HG--
branch : HEAD |
73bfdbe28c2ce6d143eadf0bab8ccfbe4cab0fae |
|
13-Oct-2004 |
Timo Sirainen <tss@iki.fi> |
Changed dovecot-auth protocol to ASCII based. Should be easier now to write
replacement server if needed by someone. Also cleaned up/made more
consistent auth code. The new code could still use some cleaning though..
--HG--
branch : HEAD |
232fffb659ec20906c1b4853f87809b05bce11c1 |
|
11-Oct-2004 |
Timo Sirainen <tss@iki.fi> |
Changed the "internal error" message, once again. Hopefully this is finally
clear enough for people to actually understand to look at the logs.
--HG--
branch : HEAD |
c49a19168dab6fda80aee16ad799a8a56d3bc18f |
|
11-Oct-2004 |
Timo Sirainen <tss@iki.fi> |
Login process cleanups. Share more authentication code between pop3/imap.
--HG--
branch : HEAD |
4b058f90f9e8a2c6b2eed275de4eb8cc5195a71d |
|
08-Oct-2004 |
Timo Sirainen <tss@iki.fi> |
Buffer API change: we no longer support limited sized buffers where
writes past limit wouldn't kill the process. They weren't used hardly
anywhere, they could have hidden bugs and the code for handling them was too
complex.
This also changed base64 and hex-binary APIs.
--HG--
branch : HEAD |
b12eeefe58793031ebf4cff240a39ca33680b6e8 |
|
05-Oct-2004 |
Timo Sirainen <tss@iki.fi> |
auth_verbose now affects imap/pop3 login processes too. Every authentication
attempt by client is logged. Also fixed replies in AUTHENTICATE/AUTH
commands when it was aborted by client.
--HG--
branch : HEAD |
63969c244e8973a61760a98a23b127827d3d652c |
|
15-Sep-2004 |
Timo Sirainen <tss@iki.fi> |
Compiler warning fixes and cleanups
--HG--
branch : HEAD |
50bdbcb771ff0f1c854c0719a3e4b3fc7736aec0 |
|
02-Sep-2004 |
Timo Sirainen <tss@iki.fi> |
Tell dovecot-auth if SSL/TLS is enabled. Nothing can done with it yet
though.
--HG--
branch : HEAD |
1479508e528e14cc6cd3f60b8458f6ebc7737899 |
|
22-Aug-2004 |
Timo Sirainen <tss@iki.fi> |
AUTHENTICATE and AUTH commands were broken.
--HG--
branch : HEAD |
2767104d81e97a109f0aa9758792bfa1da325a97 |
|
15-Aug-2004 |
Timo Sirainen <tss@iki.fi> |
We never do blocking reads/writes to network anymore. Changed imap and pop3
processes to use a single I/O loop.
Not much tested yet, and currently LIST/LSUB may eat too much memory and
APPEND eats all CPU.
--HG--
branch : HEAD |
714da64cd3d7dc94f922eab12c9c26f875b6c5a2 |
|
06-Jul-2004 |
Timo Sirainen <tss@iki.fi> |
Add "Error report written to server log." also to internal login error
messages.
--HG--
branch : HEAD |
8eea67470c1bd8562a62e7445d930bb2079b1a43 |
|
03-Jul-2004 |
Timo Sirainen <tss@iki.fi> |
Added APOP authentication for POP3. Patch by Andrey Panin.
This required some changes in auth APIs.
--HG--
branch : HEAD |
c00bbef2490c4a2e5f564b948d6ad9162a596ec8 |
|
23-Jun-2004 |
Timo Sirainen <tss@iki.fi> |
crashfix if client closes connection while authenticating
--HG--
branch : HEAD |
64e244defe74f513ce94f33d000a048ddbe2ea23 |
|
31-May-2004 |
Timo Sirainen <tss@iki.fi> |
Added %l, %r and %P variables and mail_log_prefix setting.
--HG--
branch : HEAD |
bc6294e4f0d7a54ff601257adaa44331a91b234e |
|
30-May-2004 |
Timo Sirainen <tss@iki.fi> |
Use initial SASL response for LOGIN command internally.
--HG--
branch : HEAD |
d1414c09cf0d58ac983054e2f4e1a1f329272dcf |
|
29-May-2004 |
Timo Sirainen <tss@iki.fi> |
Removed hardcoded mechanism lists. It's now possible to add them
dynamically. Added support for SASL initial response.
--HG--
branch : HEAD |
6d701b8abc45d6d3881ee19ffc6f38b23d35eea5 |
|
29-May-2004 |
Timo Sirainen <tss@iki.fi> |
Don't use hardcoded protocol list for auth process, string is just fine.
--HG--
branch : HEAD |
8222ce68120b51353a3b31d3073b5f845d0e9f53 |
|
17-May-2004 |
Timo Sirainen <tss@iki.fi> |
Added ssl_require_client_cert auth-specific setting. Hide
ssl_verify_client_cert from default config file as it's automatically set if
needed and there's not much point in forcing it.
--HG--
branch : HEAD |
9eb98cb3f9139afaaaf84b789b70abd1d0890932 |
|
01-May-2004 |
Timo Sirainen <tss@iki.fi> |
Don't advertise AUTH=PLAIN unless transport is secure
--HG--
branch : HEAD |
48fc20cea83c68d4484af70bf88b85ed133f444d |
|
25-Nov-2003 |
Timo Sirainen <tss@iki.fi> |
IMAP AUTHENTICATE and POP3 AUTH commands could have left the process stuck
doing nothing forever.
--HG--
branch : HEAD |
cd466fe7b84b0223735a6469c7f7bc225f65996d |
|
21-Sep-2003 |
Timo Sirainen <tss@iki.fi> |
data_stack_pool split into two: unsafe_data_stack_pool which works like
before, and a new one which verifies that stack frame stays the same
whenever the pool is accessed.
--HG--
branch : HEAD |
31e020ffe023c80d3dc70d3625c0633187620638 |
|
24-Aug-2003 |
Timo Sirainen <tss@iki.fi> |
disable_plaintext_auth defaults to yes now. ipv4 127.* and ipv6 ::1
addresses are considered secure however and plaintext authentication is
allowed from them.
--HG--
branch : HEAD |
235cb7d2446d5c2e25962e5c461f51fe6579c581 |
|
22-Aug-2003 |
Timo Sirainen <tss@iki.fi> |
fixes. maybe it works now.
--HG--
branch : HEAD |
2a90d8a14b0e7cc1508814bc87d3dfa598ef46a8 |
|
22-Aug-2003 |
Timo Sirainen <tss@iki.fi> |
Moved client side code for auth process handling to lib-auth. Some other login process cleanups.
--HG--
branch : HEAD |
007d354a674fb3ddf49db160cf050cf61270a1a0 |
|
23-May-2003 |
Timo Sirainen <tss@iki.fi> |
Removed I/O priorities. They were pretty much useless and were just getting
in way.
--HG--
branch : HEAD |
858ab3c731f91cc5bb0a1454fd8deb86b0271b52 |
|
16-May-2003 |
Timo Sirainen <tss@iki.fi> |
If client tries to do LOGIN even if it's disabled, send [ALERT] to user.
--HG--
branch : HEAD |
5bc0ddc263fc56dcbc5ccf53a7368da7611cf8de |
|
16-May-2003 |
Timo Sirainen <tss@iki.fi> |
Don't advertise AUTH=PLAIN in capability if disable_plaintext_auth = yes and
SSL/TLS is not yet negotiated.
--HG--
branch : HEAD |
210a55c1e7183def859be97976859f5a24d3483c |
|
04-Mar-2003 |
Timo Sirainen <tss@iki.fi> |
login: Wait until we're connected to auth process before executing command
from client.
inetd usage: --group=name can now specify which login group to use. Default
is the binary name before '-' character (ie. imap or pop3).
--HG--
branch : HEAD |
d6f5e0328b752714d70ad21644845e368f8b1040 |
|
01-Feb-2003 |
Timo Sirainen <tss@iki.fi> |
Send protocol with auth requests
--HG--
branch : HEAD |
bf72c930996df0691932fb1143f360d260f27a06 |
|
01-Feb-2003 |
Timo Sirainen <tss@iki.fi> |
Moved more auth code to login-common.
--HG--
branch : HEAD |
345648b341f228bd7f0b89f8aa3ecb9c470d817e |
|
01-Feb-2003 |
Timo Sirainen <tss@iki.fi> |
auth: kill login connection if it leaves requests hanging too long.
--HG--
branch : HEAD |
c0a708fa3f7b8f4fbca32052da5faf7a0125189d |
|
28-Jan-2003 |
Timo Sirainen <tss@iki.fi> |
Moved common login process code to login-common, created pop3-login.
--HG--
branch : HEAD |