bcb4e51a409d94ae670de96afb8483a4f7855294 |
|
01-Jan-2018 |
Stephan Bosch <stephan.bosch@dovecot.fi> |
Updated copyright notices to include the year 2018. |
296acbaddb68301e5ae3579a1da9325064c4dca8 |
|
07-Nov-2017 |
Timo Sirainen <timo.sirainen@dovecot.fi> |
*-login: Add login_proxy_notify_path setting to configure proxy-notify path
A single FIFO can be a bottleneck, so this could be set to e.g.:
login_proxy_notify_path = proxy-notify%1R{pid}
or:
login_proxy_notify_path = proxy-notify%10N{pid} |
2454dfa32c93c20a8522c6ed42fe057baaac9f9a |
|
01-Jan-2017 |
Stephan Bosch <stephan.bosch@dovecot.fi> |
Updated copyright notices to include the year 2017. |
efe78d3ba24fc866af1c79b9223dc0809ba26cad |
|
24-Dec-2016 |
Stephan Bosch <stephan.bosch@dovecot.fi> |
global: Replaced all instances of memset(p, 0, sizeof(*p)) with the new i_zero() macro.
Used the following script:
C_FILES=`git ls-files *.c`
H_FILES=`git ls-files *.h`
for F in "$C_FILES $H_FILES"; do
echo "$F"
perl -p -i -e 's/safe_memset\(&\(?([^,]*)\)?,\s*0,\s*sizeof\(\g1\)\)/i_zero_safe(&$1)/g' $F
perl -p -i -e 's/safe_memset\(([^,]*),\s*0,\s*sizeof\(\*\g1\)\)/i_zero_safe($1)/g' $F
perl -p -i -e 's/memset\(&\(?([^,]*)\)?,\s*0,\s*sizeof\(\g1\)\)/i_zero(&$1)/g' $F
perl -p -i -e 's/memset\(([^,]*),\s*0,\s*sizeof\(\*\g1\)\)/i_zero($1)/g' $F
done |
0f5dc4da3982053036be65190e44bf28a67b1ca2 |
|
02-Nov-2016 |
Timo Sirainen <timo.sirainen@dovecot.fi> |
lib: API change - var_expand*() now returns error string.
This allows callers to fail properly if the format string is invalid. |
acfda38b75d0f0e899ef692fef01593bd56ed85e |
|
20-Oct-2016 |
Timo Sirainen <timo.sirainen@dovecot.fi> |
global: Try to initialize var_expand_tab[] directly.
This avoids accidents with the array numbering being wrong. |
fe791e96fdf796f7d8997ee0515b163dc5eddd72 |
|
20-Oct-2016 |
Aki Tuomi <aki.tuomi@dovecot.fi> |
auth: Pass local_name to auth-request
This allows using local_name in various places,
such as passdb/userdb queries. |
0175d37a5ae5a4d146ca41b684bd38d9b03683cb |
|
30-May-2016 |
Martti Rannanjärvi <martti.rannanjarvi@dovecot.fi> |
Remove t_malloc in favour of t_malloc_no0
Using either t_malloc_no0 or t_malloc0 makes it clear whether the
allocated memory is zeroed or not. |
4819488364b20ee82a9d60177d15c79d0b5abbe0 |
|
15-Jan-2016 |
Timo Sirainen <timo.sirainen@dovecot.fi> |
*-login: Added login_plugins and login_plugin_dir settings. |
02c335c23bf5fa225a467c19f2c063fb0dc7b8c3 |
|
12-Jan-2016 |
Timo Sirainen <timo.sirainen@dovecot.fi> |
global: freshen copyright
git ls-files | xargs perl -p -i -e 's/(\d+)-201[0-5]/$1-2016/g;s/ (201[0-5]) Dovecot/ $1-2016 Dovecot/' |
c9d685897f9e7f0d5e27c00d4b03281d6049ccd1 |
|
07-Sep-2015 |
Timo Sirainen <tss@iki.fi> |
login proxy: Added delayed disconnection of clients on server mass-disconnect.
login_proxy_max_disconnect_delay setting (default 0 = disabled) controls for
how long time period the disconnections are spread to. The idea behind this
is to avoid load spikes due to client reconnections when a backend server
dies or is restarted. |
7cb128dc4cae2a03a742f63ba7afee23c78e3af0 |
|
05-Jan-2015 |
Phil Carmody <phil@dovecot.fi> |
global: freshen copyright
Robomatically:
git ls-files | xargs perl -p -i -e 's/(\d+)-201[0-4]/$1-2015/g;s/ (201[0-4]) Dovecot/ $1-2015 Dovecot/'
Happy 2015 everyone!
Signed-off-by: Phil Carmody <phil@dovecot.fi> |
c51644e9e04effbbc9c415cadcfbcb4d9465855c |
|
16-Jun-2014 |
Timo Sirainen <tss@iki.fi> |
login proxy: Added login_source_ips setting.
The setting contains a list of IPs/hosts. The setting may be prefixed with
"?" character to indicate that only those IPs should be used that exist in
the current server (allowing the same config to be shared by multiple
servers).
The IPs are used round robin as the source IP address when proxy creates TCP
connections. This becomes useful when there are a ton of connections from
the proxy to the same destination IP, because TCP ports run out after ~64k
connections. |
a8c5a86d183db25a57bf193c06b41e092ec2e151 |
|
04-Feb-2014 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2014. |
5a580c3a38ced62d4bcc95b8ac7c4f2935b5d294 |
|
02-Feb-2013 |
Timo Sirainen <tss@iki.fi> |
Oops :) Update copyrights to 2013 without breaking all .c files. |
cca4ba2a504d70a9fe9fee37f8433997359de52c |
|
02-Feb-2013 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2013. |
32b78da5dfbbf6a06b3dbdc9278c60b55714f9bc |
|
19-Sep-2012 |
Timo Sirainen <tss@iki.fi> |
Read SSL settings only if service has SSL sockets or MASTER_SERVICE_FLAG_USE_SSL_SETTINGS. |
f29756821a4c6b12b73e4a2a3e1c230117a43773 |
|
28-Jul-2012 |
Timo Sirainen <tss@iki.fi> |
Moved ssl_* settings from login-common to lib-master.
This allows creating other SSL servers more easily. |
9d002e700183db29073954db349913e5e025e8a9 |
|
28-Jul-2012 |
Timo Sirainen <tss@iki.fi> |
lib-master: Added and used MASTER_SERVICE_INTERNAL_SET_PARSERS macro. |
f016dec9837e6a41867708e4b89ca5308dedab05 |
|
28-Apr-2012 |
Timo Sirainen <tss@iki.fi> |
auth: Include session ID in log line prefix. |
c77b85e6017a3f15943fd1c47340daefd87b1993 |
|
25-Apr-2012 |
Timo Sirainen <tss@iki.fi> |
*-login: Added ssl_require_crl setting. |
5733207dc3ec10e6e5a6e0a8b30fbd1b061062b9 |
|
05-Mar-2012 |
Timo Sirainen <tss@iki.fi> |
Added director_username_hash setting to specify what part of the username is hashed.
The default is "%u" meaning the full username. Another potentially useful
value is "%d" for hashing only the domain (i.e. redirect users from the same
domain always to same server so they can safely access each others'
shared mailboxes). |
5f5870385cff47efd2f58e7892f251cf13761528 |
|
12-Feb-2012 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2012. |
73f70e35b789fb3647c40755ed679e61c7dcb852 |
|
27-Jan-2012 |
Timo Sirainen <tss@iki.fi> |
login: If auth_debug_passwords=yes, assume auth_debug/auth_verbose=yes |
b11269887905780bc8cb7762bbb157aa59961cac |
|
27-Jan-2012 |
Timo Sirainen <tss@iki.fi> |
login process wasn't logging all intended messages with auth_verbose=yes
It was named verbose_auth setting accidentally. |
58080063fab18a22e05987339376b52b09f3a256 |
|
24-Nov-2011 |
Timo Sirainen <tss@iki.fi> |
login: Added ssl_crypto_device setting to set OpenSSL engine. |
f45da0b456f0f1540c221f9fdc7d8f7b93400782 |
|
18-Nov-2011 |
Timo Sirainen <tss@iki.fi> |
login proxy: Added ssl_client_cert/key settings.
The client cert is used sent to proxy destination server when SSL is used. |
ec892704d6a9625195fbb4087edeb04bc463d4ff |
|
01-Oct-2011 |
Timo Sirainen <tss@iki.fi> |
Added ssl_protocols setting. |
a04a1eae9899b33264706cad9fc59fb28428ef31 |
|
10-May-2011 |
Timo Sirainen <tss@iki.fi> |
Removed ssl_parameters_file setting. It wasn't used by anything. |
5a250816ffc4cc5db203f9410ea99b6601c7b91a |
|
30-Apr-2011 |
Timo Sirainen <tss@iki.fi> |
login-common API redesign so that the library doesn't refer to nonexistent variables. |
2e37d45867d081db150ab78dad303b9077aea24f |
|
04-Mar-2011 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2011. |
183bea41fa640dc8117f3eb45ff935cd81377a84 |
|
04-Mar-2011 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2011. |
434abef12f61881a5cfa28d27193d0854a9639a0 |
|
04-Jan-2011 |
Timo Sirainen <tss@iki.fi> |
login: ssl_require_client_cert and ssl_username_from_cert settings should have had auth_ prefix.
The actual functionality was provided by the auth_* settings, but with these
duplicated settings login process didn't give as good error messages. |
41942258112e4131de96b6a4399c1a8ac83a23cb |
|
09-Jun-2010 |
Timo Sirainen <tss@iki.fi> |
config: local_name foo {} is now for TLS SNI. local foo {} only resolves foo to its IP.
--HG--
branch : HEAD |
71834d0736d031ccba629fcae62ba71c56e6b4ed |
|
20-May-2010 |
Timo Sirainen <tss@iki.fi> |
Added mail process pid to default login_log_format_elements
--HG--
branch : HEAD |
7839797af86d5536124c67f09ede30df08cf678a |
|
14-Apr-2010 |
Timo Sirainen <tss@iki.fi> |
login: Keep binary-specific defaults in a struct.
--HG--
branch : HEAD |
9b78c0d5e13141f4df6c6e483f854e5acb861288 |
|
05-Apr-2010 |
Timo Sirainen <tss@iki.fi> |
Fixed memory leak when parsing settings.
--HG--
branch : HEAD |
9d6307357b77c1006fff39f324d4f536d456b170 |
|
22-Feb-2010 |
Timo Sirainen <tss@iki.fi> |
pop3-login: Don't crash at startup.
--HG--
branch : HEAD |
5d03d9f439e41c90215a3c938ffebe4c2a8ae257 |
|
20-Feb-2010 |
Timo Sirainen <tss@iki.fi> |
lib-master: Added support for caching config lookups.
Currently caching won't work if config has any remote {} blocks.
--HG--
branch : HEAD |
79977d368df2efc3f3dc0bbb260748b076538103 |
|
06-Feb-2010 |
Timo Sirainen <tss@iki.fi> |
Added support for tcpwrappers and potentially other login access checks.
--HG--
branch : HEAD |
e59faf65ce864fe95dc00f5d52b8323cdbd0608a |
|
25-Jan-2010 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2010.
--HG--
branch : HEAD |
46552a931924c2d743f045e95b08c3ce6beda91a |
|
02-Jan-2010 |
Timo Sirainen <tss@iki.fi> |
login-common: Renamed common.h to login-common.h
--HG--
branch : HEAD |
3517e23cc1207c471fea7fec422916061542308d |
|
23-Dec-2009 |
Timo Sirainen <tss@iki.fi> |
*-login: Removed redundant %{hostname} variable.
--HG--
branch : HEAD |
277c0eea825eec176cddc029af68f5a4d942e16e |
|
08-Dec-2009 |
Timo Sirainen <tss@iki.fi> |
*-login: ssl_ca_file setting changed to ssl_ca.
--HG--
branch : HEAD |
7bafda1813454621e03615e83d55bccfa7cc56bd |
|
04-Dec-2009 |
Timo Sirainen <tss@iki.fi> |
Removed MEMBER() macro. Require C99 style struct initializer.
--HG--
branch : HEAD |
71b5ad1df203c906d46960b0400564609b97a6c8 |
|
29-Oct-2009 |
Timo Sirainen <tss@iki.fi> |
*-login: Added support for TLS SNI.
--HG--
branch : HEAD |
7744586e3e0fd60158abfbb03a233d3bd8d6c48b |
|
24-Oct-2009 |
Timo Sirainen <tss@iki.fi> |
Changed all settings related structs to const and changed APIs to make it work.
--HG--
branch : HEAD |
ed4cdfe5847a6063d5a4684a6a47b17e943922b5 |
|
23-Oct-2009 |
Timo Sirainen <tss@iki.fi> |
login_greeting setting now supports %variables.
--HG--
branch : HEAD |
9990cf6923b648420e9bd102e38ebfc2b9322dcc |
|
21-Oct-2009 |
Timo Sirainen <tss@iki.fi> |
ssl_ciphers_list: Disable anonymous and export ciphers by default.
--HG--
branch : HEAD |
f059a046515f4b2b15a6c2a10a6f12f6166e39a5 |
|
21-Oct-2009 |
Timo Sirainen <tss@iki.fi> |
imap-login: If imap_capability is set, use it.
--HG--
branch : HEAD |
1cfdcb36985904eff281fc6d7ea2d13b3c375980 |
|
20-Oct-2009 |
Timo Sirainen <tss@iki.fi> |
struct setting_parser_info now specifies the module name.
--HG--
branch : HEAD |
383d0e8c24451468d6bea17e4b55d74de744abe6 |
|
20-Oct-2009 |
Timo Sirainen <tss@iki.fi> |
Reordered struct setting_parser_info fields to make using them easier.
--HG--
branch : HEAD |
7ceee001c11865a88a311c50c4430867b2d32ce6 |
|
12-Oct-2009 |
Timo Sirainen <tss@iki.fi> |
*-login: Login binaries can now set up their own private settings.
--HG--
branch : HEAD |
557ed09439ba193b8bca128e460518e4464df2b5 |
|
10-Oct-2009 |
Timo Sirainen <tss@iki.fi> |
Removed unused login_chroot setting.
--HG--
branch : HEAD |
6fdfa4d4cf14d1d7764d7faa8258f112e39c8dbe |
|
11-Sep-2009 |
Timo Sirainen <tss@iki.fi> |
*-login: Fixed dropping oldest connection when reaching all limits.
--HG--
branch : HEAD |
0266a571e98246e2e1b9dd7fe0301e21e226929a |
|
31-Aug-2009 |
Timo Sirainen <tss@iki.fi> |
Removed last traces of login_process_per_connection setting.
--HG--
branch : HEAD |
bbba7d0fce1b6ce5baa2d7ef946eb1b63e2ab518 |
|
28-May-2009 |
Timo Sirainen <tss@iki.fi> |
imap-login now advertises only pre-login capabilities.
If client had used CAPABILITY command before logging in, untagged CAPABILITY
is sent to client in the hope that client understands this. This change
could get reverted if it breaks too many clients.
--HG--
branch : HEAD |
97db4761382024093f441e4bc78ba8b6a056504d |
|
15-May-2009 |
Timo Sirainen <tss@iki.fi> |
login processes: Added initial support for per-connection configuration.
--HG--
branch : HEAD |
02a0492affdff138f43903c19ca366363923044d |
|
14-May-2009 |
Timo Sirainen <tss@iki.fi> |
Renamed ssl_cert_file to ssl_cert and ssl_key_file to ssl_key.
Instead of pointing to files they now contain the certs directly.
--HG--
branch : HEAD |
1358e2c58ce29231485a5cfa454756d429ad3d2c |
|
12-May-2009 |
Timo Sirainen <tss@iki.fi> |
config handling fixes and improvements. Separated module/service lookups. Added support for per-lip/rip settings.
--HG--
branch : HEAD |
44aac2d461b4cb8e05e8c07f2f209372997a8719 |
|
06-May-2009 |
Timo Sirainen <tss@iki.fi> |
mail processes now specify user/lip/rip in config requests.
--HG--
branch : HEAD |
6c2ce1d5bf17b21e804a079eb0f973b7ab83e0d8 |
|
06-May-2009 |
Timo Sirainen <tss@iki.fi> |
Implemented anvil service, which is used to implement mail_max_userip_connections.
--HG--
branch : HEAD |
28ec5fa1cb761f528fb17aec0b16ac858da21285 |
|
06-May-2009 |
Timo Sirainen <tss@iki.fi> |
Removed login_dir setting. It's really not useful.
--HG--
branch : HEAD |
d176f84ce5ca2073f4dfbafb457b9c74f6bf0d76 |
|
24-Apr-2009 |
Timo Sirainen <tss@iki.fi> |
Initial commit for v2.0 master rewrite. Several features are still missing.
--HG--
branch : HEAD |
ce8a6f53ea3ce91b759a54b771e1779564de19a1 |
|
13-Apr-2009 |
Timo Sirainen <tss@iki.fi> |
Fix to "SSL support not compiled in" error message.
--HG--
branch : HEAD |
b9f30617c2c96d54acbc4f85ed17b939c4f28916 |
|
08-Apr-2009 |
Timo Sirainen <tss@iki.fi> |
Updated missing copyright years to 2009.
--HG--
branch : HEAD |
d63b4241643b6014d49ff356f14e0f3ee43068a8 |
|
08-Apr-2009 |
Timo Sirainen <tss@iki.fi> |
settings_parser_info.check_func() now gets pool parameter if it wants to change settings.
--HG--
branch : HEAD |
1cbc0c6372d24168962698c5f4d3e15df8943ebf |
|
10-Feb-2009 |
Timo Sirainen <tss@iki.fi> |
doveconf shouldn't check if it has access to ssl files. For example deliver doesn't need it.
--HG--
branch : HEAD |
b215a8a123623782554a83f3025ef4e771bd8f01 |
|
10-Feb-2009 |
Timo Sirainen <tss@iki.fi> |
doveconf now checks that all settings are ok by calling check functions.
--HG--
branch : HEAD |
a64adf62fa33f2463a86f990217b0c9078531a40 |
|
28-Jan-2009 |
Timo Sirainen <tss@iki.fi> |
Initial commit for config rewrite.
--HG--
branch : HEAD |