a40a4775e5369d519562e0ed9324db88b5afd78c |
|
27-Nov-2017 |
Aki Tuomi <aki.tuomi@dovecot.fi> |
login-common: Do not link lib-ssl-iostream.la twice
It's already in libdovecot.la |
71bd935dba8721d8607608bc73d04247a3732166 |
|
07-Nov-2017 |
Timo Sirainen <timo.sirainen@dovecot.fi> |
login-common: Remove ssl-proxy code |
4819488364b20ee82a9d60177d15c79d0b5abbe0 |
|
15-Jan-2016 |
Timo Sirainen <timo.sirainen@dovecot.fi> |
*-login: Added login_plugins and login_plugin_dir settings. |
1093de32efb2a231949566d4bd8aa55a8f43fb70 |
|
09-Jun-2013 |
Timo Sirainen <tss@iki.fi> |
imap/pop3-login: Use libsasl for authenticating to remote IMAP/POP3 server.
Also passdb lookup can return "proxy_mech" extra field to specify which SASL
mechanism to use. |
3faa1040e5a3f9f35ffad29110216094ab2f5880 |
|
06-Nov-2012 |
Timo Sirainen <tss@iki.fi> |
lib-ssl-iostream now dynamically loads openssl library instead of linking to it.
This allowed removing the separate libdovecot-ssl library. In future if
GnuTLS/NSS support is added it would also allow switching between them
dynamically. |
5733207dc3ec10e6e5a6e0a8b30fbd1b061062b9 |
|
05-Mar-2012 |
Timo Sirainen <tss@iki.fi> |
Added director_username_hash setting to specify what part of the username is hashed.
The default is "%u" meaning the full username. Another potentially useful
value is "%d" for hashing only the domain (i.e. redirect users from the same
domain always to same server so they can safely access each others'
shared mailboxes). |
b71ec9499d47c92e5fd08683106c01e9face17eb |
|
04-Mar-2012 |
Timo Sirainen <tss@iki.fi> |
Makefile: Link with SSL_LIBS whenever linking libssl_iostream.la |
38c92ae79cebe87c2da6f8e29e1dcc4f5b5c88da |
|
25-Feb-2012 |
Timo Sirainen <tss@iki.fi> |
login proxy: Removed host DNS lookup code, since auth does it now. |
831f3bcdde51fa388462eda1daa555e90651ca2e |
|
08-Nov-2011 |
Timo Sirainen <tss@iki.fi> |
login proxy: Verify that remote hostname matches SSL cert, unless ssl=any-cert |
5ec40a17da1dfd119281c6425f12b2247d5f2a71 |
|
30-Apr-2011 |
Timo Sirainen <tss@iki.fi> |
Makefile: Fixes to compiling with LDFLAGS="-Wl,--as-needed -Wl,--no-undefined" |
53f37d41e1abb068131320f39f870fc92e81f560 |
|
08-Apr-2010 |
Timo Sirainen <tss@iki.fi> |
configure: Removed --enable-header-install. It's now always enabled.
There didn't seem to be much point in keeping it optional anymore. They're
now more useful than before because shared libraries are also installed.
--HG--
branch : HEAD |
79977d368df2efc3f3dc0bbb260748b076538103 |
|
06-Feb-2010 |
Timo Sirainen <tss@iki.fi> |
Added support for tcpwrappers and potentially other login access checks.
--HG--
branch : HEAD |
2ef0e8ee48c9683f7bd6698798efa3328e4322d1 |
|
31-Jan-2010 |
Timo Sirainen <tss@iki.fi> |
login: Proxying supports now doing DNS lookups for host names.
--HG--
branch : HEAD |
6ca0e8a0c4aa1f42d67a39b0cefd1da2b2eda266 |
|
02-Jan-2010 |
Timo Sirainen <tss@iki.fi> |
login-common: Install headers.
--HG--
branch : HEAD |
46552a931924c2d743f045e95b08c3ce6beda91a |
|
02-Jan-2010 |
Timo Sirainen <tss@iki.fi> |
login-common: Renamed common.h to login-common.h
--HG--
branch : HEAD |
e0a049aa308a2e66044af3ef8e0fb70ce909ad41 |
|
13-Aug-2009 |
Timo Sirainen <tss@iki.fi> |
login-proxy: If proxy destination is known to be down, fail immediately.
We'll use simple rules:
1. If connection to destination server failed more recently than it
succeeded AND there is currently at least one client trying to connect to
it, fail immediately without even trying to connect.
2. Whenever a connection to destination server fails because of timeout or
some connect failure AND last successful connection to server was before our
connect() started, update the "last failed" timestamp.
With these rules there are no unnecessary connect() attempts or waits to
servers that are down. When the server does come back up, it's noticed
immediately.
--HG--
branch : HEAD |
e248fe370c4047cee921a91b48edc37944ab0526 |
|
10-Aug-2009 |
Timo Sirainen <tss@iki.fi> |
*-login: Moved most of the common code to login-common.
--HG--
branch : HEAD |
7ab70e15c63c172c1715a40c8ffcff0285b6f05e |
|
22-Jun-2009 |
Timo Sirainen <tss@iki.fi> |
Removed unnecessary macro definitions from Makefiles.
--HG--
branch : HEAD |
d176f84ce5ca2073f4dfbafb457b9c74f6bf0d76 |
|
24-Apr-2009 |
Timo Sirainen <tss@iki.fi> |
Initial commit for v2.0 master rewrite. Several features are still missing.
--HG--
branch : HEAD |
8dec8eab222cb7a0b4ef5e066cb1d7dac8a526d1 |
|
14-Apr-2009 |
Timo Sirainen <tss@iki.fi> |
Added configure --without-shared-libs to link built binaries against static libraries.
The libraries are still built and installed, so this is mainly useful for
making life easier for developers.
--HG--
branch : HEAD |
d3b29d4b61f1549244a7509b798be6f806cf7d4e |
|
04-Apr-2009 |
Timo Sirainen <tss@iki.fi> |
Build libdovecot.so and libdovecot-storage.so.
Based on patch by Stephan Bosch.
--HG--
branch : HEAD |
a64adf62fa33f2463a86f990217b0c9078531a40 |
|
28-Jan-2009 |
Timo Sirainen <tss@iki.fi> |
Initial commit for config rewrite.
--HG--
branch : HEAD |
92d2168f4802b85933d2d2aca56741c6d3f0c592 |
|
13-Jan-2009 |
Timo Sirainen <tss@iki.fi> |
Check broken ssl-parameters.dat files better and give a better error message when seeing one.
--HG--
branch : HEAD |
e40dad3da455bba45a33305fd8b3ab30c596b0c5 |
|
23-Apr-2005 |
Timo Sirainen <tss@iki.fi> |
Added --with-rundir configure option.
--HG--
branch : HEAD |
5355df8b66da35698449a10c2c83633a64995298 |
|
21-Oct-2004 |
Timo Sirainen <tss@iki.fi> |
Upgrades to autoconf 2.5 and automake >1.4.
--HG--
branch : HEAD |
ba90e657bc68a72ab3b3021e2f4a874fac9965ba |
|
18-Oct-2004 |
Timo Sirainen <tss@iki.fi> |
Added IMAP and POP3 proxying support.
--HG--
branch : HEAD |
5fb13f638aea5497e77d4f9f14a38eb8257a92ef |
|
15-Oct-2004 |
Timo Sirainen <tss@iki.fi> |
missing sasl-server.h
--HG--
branch : HEAD |
c49a19168dab6fda80aee16ad799a8a56d3bc18f |
|
11-Oct-2004 |
Timo Sirainen <tss@iki.fi> |
Login process cleanups. Share more authentication code between pop3/imap.
--HG--
branch : HEAD |
2a90d8a14b0e7cc1508814bc87d3dfa598ef46a8 |
|
22-Aug-2003 |
Timo Sirainen <tss@iki.fi> |
Moved client side code for auth process handling to lib-auth. Some other login process cleanups.
--HG--
branch : HEAD |
210a55c1e7183def859be97976859f5a24d3483c |
|
04-Mar-2003 |
Timo Sirainen <tss@iki.fi> |
login: Wait until we're connected to auth process before executing command
from client.
inetd usage: --group=name can now specify which login group to use. Default
is the binary name before '-' character (ie. imap or pop3).
--HG--
branch : HEAD |
a7c58de2babd44256c9bb63f12876433646f9e7e |
|
04-Mar-2003 |
Timo Sirainen <tss@iki.fi> |
Somewhat working code to support loading Dovecot from inetd and such. It
still needs possibility to specify which login process to use, and LOGIN and
AUTHENTICATE commands shouldn't be allowed before we're connected to auth
process.
--HG--
branch : HEAD |
bf72c930996df0691932fb1143f360d260f27a06 |
|
01-Feb-2003 |
Timo Sirainen <tss@iki.fi> |
Moved more auth code to login-common.
--HG--
branch : HEAD |
c0a708fa3f7b8f4fbca32052da5faf7a0125189d |
|
28-Jan-2003 |
Timo Sirainen <tss@iki.fi> |
Moved common login process code to login-common, created pop3-login.
--HG--
branch : HEAD |