*-login: Add login_proxy_notify_path setting to configure proxy-notify path A single FIFO can be a bottleneck, so this could be set to e.g.: login_proxy_notify_path = proxy-notify%1R{pid} or: login_proxy_notify_path = proxy-notify%10N{pid}

*-login: Added login_plugins and login_plugin_dir settings.

login proxy: Added delayed disconnection of clients on server mass-disconnect. login_proxy_max_disconnect_delay setting (default 0 = disabled) controls for how long time period the disconnections are spread to. The idea behind this is to avoid load spikes due to client reconnections when a backend server dies or is restarted.

login proxy: Added login_source_ips setting. The setting contains a list of IPs/hosts. The setting may be prefixed with "?" character to indicate that only those IPs should be used that exist in the current server (allowing the same config to be shared by multiple servers). The IPs are used round robin as the source IP address when proxy creates TCP connections. This becomes useful when there are a ton of connections from the proxy to the same destination IP, because TCP ports run out after ~64k connections.

Moved ssl_* settings from login-common to lib-master. This allows creating other SSL servers more easily.

Marked functions parameters that are allowed to be NULL. Some APIs were also changed. The non-obvious APIs where NULL parameter was changed to "" are master_service_init() and auth_master_user_list_init(). These checks can currently be enabled only on a patched clang: http://llvm.org/bugs/show_bug.cgi?id=6786

*-login: Added ssl_require_crl setting.

Added director_username_hash setting to specify what part of the username is hashed. The default is "%u" meaning the full username. Another potentially useful value is "%d" for hashing only the domain (i.e. redirect users from the same domain always to same server so they can safely access each others' shared mailboxes).

login: If auth_debug_passwords=yes, assume auth_debug/auth_verbose=yes

login process wasn't logging all intended messages with auth_verbose=yes It was named verbose_auth setting accidentally.

login: Added ssl_crypto_device setting to set OpenSSL engine.

login proxy: Added ssl_client_cert/key settings. The client cert is used sent to proxy destination server when SSL is used.

Added ssl_protocols setting.

Removed ssl_parameters_file setting. It wasn't used by anything.

login: ssl_require_client_cert and ssl_username_from_cert settings should have had auth_ prefix. The actual functionality was provided by the auth_* settings, but with these duplicated settings login process didn't give as good error messages.

config: local_name foo {} is now for TLS SNI. local foo {} only resolves foo to its IP. --HG-- branch : HEAD

lib-master: Added support for caching config lookups. Currently caching won't work if config has any remote {} blocks. --HG-- branch : HEAD

Added support for tcpwrappers and potentially other login access checks. --HG-- branch : HEAD

*-login: ssl_ca_file setting changed to ssl_ca. --HG-- branch : HEAD

*-login: Added support for TLS SNI. --HG-- branch : HEAD

Changed all settings related structs to const and changed APIs to make it work. --HG-- branch : HEAD

imap-login: If imap_capability is set, use it. --HG-- branch : HEAD

*-login: Login binaries can now set up their own private settings. --HG-- branch : HEAD

Removed unused login_chroot setting. --HG-- branch : HEAD

*-login: Fixed dropping oldest connection when reaching all limits. --HG-- branch : HEAD

Removed last traces of login_process_per_connection setting. --HG-- branch : HEAD

imap-login now advertises only pre-login capabilities. If client had used CAPABILITY command before logging in, untagged CAPABILITY is sent to client in the hope that client understands this. This change could get reverted if it breaks too many clients. --HG-- branch : HEAD

login processes: Added initial support for per-connection configuration. --HG-- branch : HEAD

Renamed ssl_cert_file to ssl_cert and ssl_key_file to ssl_key. Instead of pointing to files they now contain the certs directly. --HG-- branch : HEAD

Implemented anvil service, which is used to implement mail_max_userip_connections. --HG-- branch : HEAD

Removed login_dir setting. It's really not useful. --HG-- branch : HEAD

Initial commit for v2.0 master rewrite. Several features are still missing. --HG-- branch : HEAD

Code cleanup: Don't use __ prefix in header #defines. --HG-- branch : HEAD

Initial commit for config rewrite. --HG-- branch : HEAD