master: Removed unused process_exec(extra_args) parameter Removes unnecessarily complicated code marked with @UNSAFE.

global: use dev_null_fd instead of opening /dev/null

master: Don't unlink login sockets at startup if someone is listening to them. The original check there never worked, because null_fd was always set. Normally the master.pid file would prevent this happening, but if it didn't exist, the sockets would be unlinked and usually also created back.

Marked functions parameters that are allowed to be NULL. Some APIs were also changed. The non-obvious APIs where NULL parameter was changed to "" are master_service_init() and auth_master_user_list_init(). These checks can currently be enabled only on a patched clang: http://llvm.org/bugs/show_bug.cgi?id=6786

master: Use per-services_list "master is dead" fd, so services know when config is reload.

master-child API change: Use a separate fd for tracking when master dies. This works around a Linux performance problem where when one process writes to status fd all the other processes of the same service type wake up.

master: Use t_askpass() for getting the manual SSL key password.

Removed all traces of auth-success file checking. The file no longer got written after pre/post-login process redesign and maybe it's too much trouble to get it back. --HG-- branch : HEAD

dovecot -p (ask ssl key password from command line) works again. --HG-- branch : HEAD

master: Several fixes to handling SIGHUPs. --HG-- branch : HEAD

lib-master has now a global master_service variable that all binaries use. There should always be only one of them anyway. --HG-- branch : HEAD

master: Added back some startup checks/fixes. --HG-- branch : HEAD

Initial commit for v2.0 master rewrite. Several features are still missing. --HG-- branch : HEAD

Improved logging for core dumping. With Linux use PR_SET_DUMPABLE for imap/pop3. --HG-- branch : HEAD

Improved logging for core dumping. With Linux use PR_SET_DUMPABLE for imap/pop3. --HG-- branch : HEAD

Print a help message about authentication at startup until the first successful authentication. --HG-- branch : HEAD

Changed .h ifdef/defines to use <NAME>_H format. --HG-- branch : HEAD

Removed validate_str(). It's not used anywhere. --HG-- branch : HEAD

Moved child process handling to child-process.[ch]. The hash table now uses pointers to structures instead of a casted process type. This allowed removing another login-processes hash table. --HG-- branch : HEAD

Added ssl-build-param binary to build the ssl-parameters.dat. This way dovecot master binary doesn't anymore need to be linked with SSL libraries, and the process title is also clearer. --HG-- branch : HEAD

Added support for password protected SSL private keys. The password can be given in dovecot.conf, or when dovecot is started with -p parameter. --HG-- branch : HEAD

Added "bool" type and changed all ints that were used as booleans to bool. --HG-- branch : HEAD

Start dict server automatically when a client tries to connect to it. --HG-- branch : HEAD

Restructuring of auth code. Balancer auth processes were a bad idea. Usually the balancer itself took as much CPU as the actual workers because it acted as a proxy. Now auth worker means different thing: they're used to execute blocking passdb and userdb queries. Currently just MySQL (PAM and checkpassword in TODO). --HG-- branch : HEAD

Allow running all executables with parameters. --HG-- branch : HEAD

Changed dovecot-auth protocol to ASCII based. Should be easier now to write replacement server if needed by someone. Also cleaned up/made more consistent auth code. The new code could still use some cleaning though.. --HG-- branch : HEAD

Fixed var_expand() to take a table of variables rather than a few predefined ones. Added support for modifiers. --HG-- branch : HEAD

Write all logging through master process. Fixes problems with log rotation, chrooting, etc. Master process also allows max. 10 log messages per second per child process, it then begins throttling them (eventually making the child process start blocking on stderr). --HG-- branch : HEAD

Replaced geteuid() calls with one in the beginning and saving it to master_uid. When chdir()ing to user's home dir, temporarily set euid to user's uid. --HG-- branch : HEAD

New configuration file code. Some syntax changes, but tries to be somewhat backwards compatible. SIGHUP now reverts back to old configuration if it detected errors in new one. --HG-- branch : HEAD

Separate PROCESS_TYPE_MAIL into IMAP and POP3. --HG-- branch : HEAD

Somewhat working code to support loading Dovecot from inetd and such. It still needs possibility to specify which login process to use, and LOGIN and AUTHENTICATE commands shouldn't be allowed before we're connected to auth process. --HG-- branch : HEAD

Moved settings parsing to lib-settings. --HG-- branch : HEAD

Rewrote setting handling. Changed some existing settings also since POP3 support required changes anyway. POP3 seems to be really working now :) --HG-- branch : HEAD

We have now separate "userdb" and "passdb". They aren't tied to each others in any way, so it's possible to use whatever user database with whatever password database. Added "static" userdb, which uses same uid/gid for everyone and generates home directory from given template. This could be useful with PAM, although insecure since everyone uses same uid. Not too well tested, and userdb/passdb API still needs to be changed to asynchronous for sql/ldap/etc lookups. --HG-- branch : HEAD

If auth/login process died unexpectedly, the exit status or killing signal wasn't logged. --HG-- branch : HEAD

Naming style changes, finally got tired of most of the typedefs. Also the previous enum -> macro change reverted so that we don't use the highest bit anymore, that's incompatible with old indexes so they will be rebuilt. --HG-- branch : HEAD

Instead of just trusting randomness of authentication cookies between auth<->master<->login process IPC, master now doesn't accept any cookies from login process which weren't created by it (identified by PID). When login process dies, all it's pending cookies are also removed, so I can't see even a theoretical possiblity anymore for exploited login process to authenticate as someone else. Also fixed some int -> unsigned int. --HG-- branch : HEAD

Drop root privileges earlier. Close syslog more later in imap-master when forking new processes, so that any errors get logged. Make sure that all errors show up in log files - use specific exit status codes if we can't write to log file. Make sure imap and login processes always drop root privileges even if master process didn't ask for it for some reason. putenv() wasn't verified to succeed - luckily we never allowed large user given data there. --HG-- branch : HEAD

Clear separation of virtual and system usernames. passwd-file didn't work before if the user didn't exist in system. Prefixed also all setuid/etc. restriction environments with RESTRICT_. --HG-- branch : HEAD

Master process generates DH/RSA parameters now and stores them into file which login processes read. Added setting for regeneration interval. Some other SSL cleanups. Also fixed default login process path to be ../run/dovecot/login/ like example config file said, instead of just ../run/dovecot/ which it actually was until now. --HG-- branch : HEAD

Added verbose_proctitle setting: Show more verbose process titles (in ps). Currently shows user name and IP address. Useful for seeing who are actually using the IMAP processes (eg. shared mailboxes or if same uid is used for multiple accounts). --HG-- branch : HEAD

cleanup --HG-- branch : HEAD

Replaced INT_TO_POINTER and POINTER_TO_INT macros with POINTER_CAST and POINTER_CAST_TO macros, the CAST_TO takes a parameter to which type we're casting to. Also POINTER_CAST should be valid ANSI-C now. --HG-- branch : HEAD

Initial revision --HG-- branch : HEAD