master: Add default_internal_group setting, defaulting to "dovecot" It's expected that this is the primary group of the default_internal_user. This group will be used to provide access to sockets that are generally required by all Dovecot processes, but aren't safe enough to be allowed completely open access from untrusted processes.

master: Move import_environment setting to lib-master's master_service_settings

Made PKG_STATEDIR configurable with state_dir setting. Based on patch by Chris Webb. Normally this isn't needed, since the data in the state_dir can be shared across multiple Dovecot instances, but in some specific use cases this may be useful (e.g. users running their own Dovecots).

master: Problems with creating base_dir/statedir should be fatals.

master: Added instance_name setting, which is used to prefix processes in ps output.

Added import_environment setting. This also cleans up different places in code where TZ and other environments are preserved. If it's not in the import_environment setting, it's not preserved.

Removed unused auth/mail_debug settings from structs.

Reverted previous commit. It's a stupid feature: mail_access_groups already exists.

Added default_mail_extra_groups setting. imap/pop3/lmtp services' extra_groups defaults to it. For now this default is empty to make sure existing installations don't break.

Added support for per-service idle kill timeout. Director and anvil services are by default never killed. This also fixes the errors about idling director process not dying. --HG-- branch : HEAD

Added default_internal_user and default_login_user settings, which services use as default users. --HG-- branch : HEAD

config: Allow settings plugins to specify also new default services. --HG-- branch : HEAD

Added "size" setting type, which supports B/k/M/G/T suffixes. --HG-- branch : HEAD

master: Removed unused verbose_proctitle setting. --HG-- branch : HEAD

Moved default service settings from master.conf to source code. --HG-- branch : HEAD

Changed all settings related structs to const and changed APIs to make it work. --HG-- branch : HEAD

Fixed login processes' core dump handling. --HG-- branch : HEAD

Redesigned how login process passes connections to mail processes and changed related APIs. Master process is no longer in the middle. --HG-- branch : HEAD

master: Added back "listen" setting, which is the default address for inet_listeners. --HG-- branch : HEAD

master: Added default_vsz_limit setting, which defaults to 256 MB. --HG-- branch : HEAD

verbose_proctitle setting works again. --HG-- branch : HEAD

master: auth setting blocks don't exist anymore, removed them. --HG-- branch : HEAD

master: Added process_min_avail setting for services. --HG-- branch : HEAD

master: If ssl=no, skip inet_listeners with ssl=yes. --HG-- branch : HEAD

Added service_count setting to limit how many requests a service can handle before dying. --HG-- branch : HEAD

protocols setting works again. Services can now specify which protocol they implement and they can quickly enabled/disabled by modifying protocols setting. imaps and pop3s are no longer separate protocols. --HG-- branch : HEAD

master: Support reloading configuration. --HG-- branch : HEAD

master: If mail_debug=yes, set DEBUG=1 environment to auth-destination processes. --HG-- branch : HEAD

master: Added back some startup checks/fixes. --HG-- branch : HEAD

inet_listeners now support ssl=yes. For now only login processes support it. --HG-- branch : HEAD

Require each service to have a unique name. Log service errors using service_error(). --HG-- branch : HEAD

Initial commit for v2.0 master rewrite. Several features are still missing. --HG-- branch : HEAD

Moved most of the dict settings handling to dict binary. --HG-- branch : HEAD

dbox: Added dbox_purge_min_percentage setting. --HG-- branch : HEAD

Removed umask setting. We're nowadays creating practically all files with proper umasks. --HG-- branch : HEAD

Added maildir_very_dirty_syncs setting. --HG-- branch : HEAD

Removed nfs_check. So much trouble and so unreliable.. --HG-- branch : HEAD

We don't care about plugin settings anymore, removed. --HG-- branch : HEAD

Initial commit for config rewrite. --HG-- branch : HEAD

mail_extra_groups backwards compatibility setting removed. --HG-- branch : HEAD

Added dict_process_count setting for creating multiple dict processes. --HG-- branch : HEAD

Renamed "ssl_disable" setting to "ssl". Added support for ssl=required. --HG-- branch : HEAD

Replaced auth_worker_max_request_count setting with passdb pam { args = max_requests=n } --HG-- branch : HEAD

Added alias_for setting for namespaces. Fixes namespace issues with fts. --HG-- branch : HEAD

Added list=children option for namespaces. --HG-- branch : HEAD

Renamed auth_ntlm_use_winbind to auth_use_winbind, which also determines if GSS-SPNEGO is handled by GSSAPI or winbind. --HG-- branch : HEAD

Removed login_greeting_capability setting. Instead now a minimal pre-login capability list is sent in the banner. CAPABILITY command still returns a full list. If CAPABILITY command wasn't used, the full capability list is sent in LOGIN/AUTHENTICATE tagged OK reply. --HG-- branch : HEAD

Support transferring original IPs and ports through IMAP proxies. Clients from login_trusted_networks are allowed to override them. Dovecot's IMAP proxy sends them via IMAP ID command. They're always sent if the remote advertises ID in the banner's CAPABILITY. --HG-- branch : HEAD

Added support for IMAP ID extension. --HG-- branch : HEAD

Added dict_db_config setting to point to a Berkeley DB config file. --HG-- branch : HEAD

Replaced mail_extra_groups setting with mail_privileged_group and mail_access_groups settings. mail_privileged_group allows temporary access to the group when creating mbox INBOX dotlocks. --HG-- branch : HEAD

Replaced mail_extra_groups setting with mail_privileged_group and mail_access_groups settings. mail_privileged_group allows temporary access to the group when creating mbox INBOX dotlocks. --HG-- branch : HEAD

Added auth_failure_delay setting. --HG-- branch : HEAD

Added subscriptions setting to namespaces to specify if it should handle subscriptions itself or if the parent namespace should handle them. --HG-- branch : HEAD

Changed .h ifdef/defines to use <NAME>_H format. --HG-- branch : HEAD

Added ssl_cert_username_field setting. --HG-- branch : HEAD

Removed default_mail_env backwards compatibility setting. --HG-- branch : HEAD

Added auth_worker_max_request_count setting. --HG-- branch : HEAD

Renamed auth_winbind_helper to auth_winbind_helper_path. --HG-- branch : HEAD

Added support for Samba's ntlm_auth helper. It's used for GSS-SPNEGO mechanism. If auth_ntlm_use_winbind=yes it's also used for NTLM mechanism. Patch by Dmitry Butskoy. --HG-- branch : HEAD

Added auth_cache_negative_ttl setting. --HG-- branch : HEAD

Added imap_logout_format setting with default to bytes=%i/%o --HG-- branch : HEAD

Added mail_nfs_storage and mail_nfs_index settings. --HG-- branch : HEAD

Support listening multiple sockets. SIGHUP also doesn't anymore recreate listener sockets. --HG-- branch : HEAD

Added mail_uid and mail_gid settings. --HG-- branch : HEAD

Changed mail_max_user_connections to mail_max_userip_connections. --HG-- branch : HEAD

Initial implementation for mail_max_user_connections setting. --HG-- branch : HEAD

Added list setting to namespaces to control whether mailboxes in the namespace are visible with LIST command without giving the namespace prefix (eg. does LIST "" * show the mailboxes or not) --HG-- branch : HEAD

Master and client sockets have default paths now. Section name only needs to be uncommented now for the socket to be created. --HG-- branch : HEAD

Removed mmap_no_write setting. The only OS requiring it is OpenBSD, so we're now forcing mmap_disable=yes with it instead. dovecot.index.cache file is the most important file to mmap(), but since this didn't work with mmap_no_write, there's not much point in keeping special code paths for minimal gains. --HG-- branch : HEAD

Added mailbox_list_index_disable setting. --HG-- branch : HEAD

Added auth_gssapi_hostname setting. --HG-- branch : HEAD

Added mail_log_max_lines_per_sec setting. --HG-- branch : HEAD

Removed mail_read_mmaped setting. It's a pretty useless setting and apparently it can also be buggy. --HG-- branch : HEAD

Added dotlock_use_excl setting. --HG-- branch : HEAD

-n and -a parameters shouldn't be deleting auth sockets. --HG-- branch : HEAD

Added maildir_copy_preserve_filename setting. --HG-- branch : HEAD

Added fsync_disable setting. Also added missing fsync()ing to dbox when saving mails. --HG-- branch : HEAD

Renamed default_mail_env to mail_location. Keep the default_mail_env working anyway for backwards compatibility. --HG-- branch : HEAD

Require that master's version number matches the child's, unless version_ignore=yes. Usually it's an accidental installation problem if the version numbers don't match. --HG-- branch : HEAD

Fixes to login process handling, especially with login_process_per_connection=no. Removed login_max_logging_users setting since it was somewhat weird in how it worked. Added login_max_connections to replace it with login_process_per_connection=no, and with =yes its functionality is now within login_max_processes_count. --HG-- branch : HEAD

Array API redesigned to work using unions. It now provides type safety without having to enable DEBUG, as long as the compiler supports typeof(). Its API changed a bit. It now allows directly accessing the array contents, although that's not necessarily recommended. Changed existing array usage to be type safe in a bit more places. Removed array_t completely. Also did s/modifyable/modifiable/. --HG-- branch : HEAD

Instead of passing URIs directly to dictionary server, it now accepts only named dictionaries which are configured in config file. SIGHUPing master now restarts dict server. --HG-- branch : HEAD

Fix for non-C99 compilers. --HG-- branch : HEAD

If we have plugins set and imap_capability unset, figure out the IMAP capabilities automatically by running imap binary at startup. The generated capability list isn't updated until Dovecot is restarted completely, so if you add or remove IMAP plugins you should restart. --HG-- branch : HEAD

Unless nfs_check=no or mmap_disable=yes, check for the first login if the user's index directory exists in NFS mount. If so, refuse to run. This is done only on first login to avoid constant extra overhead. --HG-- branch : HEAD

Added auth_username_format setting. --HG-- branch : HEAD

Added shutdown_clients setting to control if existing imap/pop3 processes should be killed when master is. --HG-- branch : HEAD

Added pop3_lock_session setting. --HG-- branch : HEAD

Added -a and -n parameters to dovecot to dump all/nondefault settings. A bit ugly code, but it'll do until the whole config handling gets rewritten in Dovecot 2.0. --HG-- branch : HEAD

Added auth_master_user_separator setting which allows giving the master username inside the normal username. --HG-- branch : HEAD

Removed master_no_passdb setting. Added pass setting which can be used to do the same thing, and other things. Now setting pass=yes to a passdb continues to next passdb if the lookup succeeded. This allows eg. requiring the user to be in multiple passdbs, or doing a username conversion before running the actual userdb, etc. --HG-- branch : HEAD

Replaced mail_use_modules and mail_modules settings with mail_plugins and mail_plugin_dir. Now instead of loading all plugins from the directory, you'll have to give a list of plugins to load. If the plugin couldn't be loaded, the process exits instead of just ignoring the problem (this is important with ACL plugin). --HG-- branch : HEAD

Added support for "master users" who can log in as other people. Currently works only with SASL PLAIN authentication by giving it authorization ID string. --HG-- branch : HEAD

Added plugin {} section to dovecot.conf for passing extra environment variables to mail processes. --HG-- branch : HEAD

Added auth_debug_passwords setting. If it's not enabled, hide all password strings from logs. --HG-- branch : HEAD

Added mbox_min_index_size setting. --HG-- branch : HEAD

Added mail_cache_min_mail_count setting. --HG-- branch : HEAD

Put ssl-parameters file into login directory so it still can be accessed even if login process is chrooted. --HG-- branch : HEAD

mail_max_keyword_length is integer, not boolean. --HG-- branch : HEAD

Added support for password protected SSL private keys. The password can be given in dovecot.conf, or when dovecot is started with -p parameter. --HG-- branch : HEAD

Added "bool" type and changed all ints that were used as booleans to bool. --HG-- branch : HEAD

Added dbox_rotate_min_size and fixed rotation checks. --HG-- branch : HEAD

Added dbox_rotate_size and dbox_rotate_days settings. --HG-- branch : HEAD

Ignore "protocol lda" section. --HG-- branch : HEAD

Added syslog_facility setting to config file. --HG-- branch : HEAD

Added GSSAPI support. Patch by Jelmer Vernooij and some fixes by pod@herald.ox.ac.uk --HG-- branch : HEAD

Added ssl_username_from_cert setting. Not actually tested yet.. --HG-- branch : HEAD

Added deny password databases. --HG-- branch : HEAD

Added pop3_reuse_xuidl setting. Patch by Chris Wakelin --HG-- branch : HEAD

Added configurable logging for login process. Added configurable pop3 logout string. Based on a patch by Andrey Panin. --HG-- branch : HEAD

Replaced userdb/passdb settings with blocks so it's possible to give multiple ones. Plaintext password mechanisms now support handling multiple passdbs, but others don't yet. Also fixed a few memory leaks. --HG-- branch : HEAD

Give more understandable error message if imap/pop3 listen ports conflict. --HG-- branch : HEAD

Restructuring of auth code. Balancer auth processes were a bad idea. Usually the balancer itself took as much CPU as the actual workers because it acted as a proxy. Now auth worker means different thing: they're used to execute blocking passdb and userdb queries. Currently just MySQL (PAM and checkpassword in TODO). --HG-- branch : HEAD

Added mail_debug setting. Moved full_filesystem_access from global variable to flag in mail_create*() functions. --HG-- branch : HEAD

Removed maildir_check_content_changes setting. The feature hasn't existed for a long time. --HG-- branch : HEAD

Added pop3_uidl_format setting. --HG-- branch : HEAD

Added mbox_very_dirty_syncs setting. --HG-- branch : HEAD

Added simple LRU cache for auth requests. Currently only for sql passdb. --HG-- branch : HEAD

Replaced fcntl_locks_disable with lock_method, so it's now possible to use flock() to lock indexes. --HG-- branch : HEAD

Renamed pop3_mails_keep_recent to pop3_no_flag_updates which includes not updating seen-flag. --HG-- branch : HEAD

Removed Cyrus SASL code completely. It hasn't worked for ages (if ever?) and there's not much point in having it anyway. --HG-- branch : HEAD

Added login_greeting and login_greeting_capability settings. --HG-- branch : HEAD

Added mbox_lazy_writes setting. --HG-- branch : HEAD

Added pop3_enable_last setting to enable deprecated LAST command. --HG-- branch : HEAD

Removed mailbox_check_interval completely. It wasn't currently implemented, and most (all?) clients which would benefit from it support IDLE anyway. --HG-- branch : HEAD

Added mbox_dirty_syncs setting which delays re-reading the whole mbox when it's changed. --HG-- branch : HEAD

Added auth_username_translation setting. --HG-- branch : HEAD

Added auth_debug setting. --HG-- branch : HEAD

Split client_workarounds to imap_ and pop3_ ones. Added outlook-no-nuls POP3 workaround. --HG-- branch : HEAD

Added --exec-mail option to master. It can be used to parse Dovecot config file and exec() imap/pop3 process directly. Moved --inetd option into environment as it's only for internal use. --HG-- branch : HEAD

Dovecot can now connect to externally running dovecot-auth. --HG-- branch : HEAD

Added mail_extra_groups setting. --HG-- branch : HEAD

Some of recent dotlock changes weren't committed.. --HG-- branch : HEAD

Added %l, %r and %P variables and mail_log_prefix setting. --HG-- branch : HEAD

Added maildir_stat_dirs option. --HG-- branch : HEAD

dovecot-auth can now be run by itself, it listens in UNIX sockets specified in AUTH_SOCKETS environment. Added extra_sockets auth setting which can be used to do the same thing while started through dovecot master. --HG-- branch : HEAD

Added pop3_mails_keep_recent option. Fixed recent assert crash. --HG-- branch : HEAD

Added ssl_require_client_cert auth-specific setting. Hide ssl_verify_client_cert from default config file as it's automatically set if needed and there's not much point in forcing it. --HG-- branch : HEAD

Write all logging through master process. Fixes problems with log rotation, chrooting, etc. Master process also allows max. 10 log messages per second per child process, it then begins throttling them (eventually making the child process start blocking on stderr). --HG-- branch : HEAD

Added ssl_verify_client_cert setting. --HG-- branch : HEAD

Added ssl_cipher_list setting. --HG-- branch : HEAD

and a few more custom flag -> keyword changes --HG-- branch : HEAD

Added fcntl_lock_disable setting to allow indexes to work with NFS. Some other locking fixes. --HG-- branch : HEAD

Forced locking to be right with mprotect()ing index file. Support for disabling mmap for indexes, and disabling just mmap+write(). --HG-- branch : HEAD

Added setting ssl_ca_file, patch by Zach Bagnall --HG-- branch : HEAD

Added hidden-option to namespaces to hide them from NAMESPACE reply. --HG-- branch : HEAD

Added "inbox" setting to specify which namespace has the INBOX. --HG-- branch : HEAD

Added mail_chroot setting to specify default chroot. --HG-- branch : HEAD

Make sure auth process and login process don't share uids. --HG-- branch : HEAD

Reading global auth_* defaults didn't work --HG-- branch : HEAD

Namespace configuration. --HG-- branch : HEAD

index_mmap_invalidate = yes now invalidate memory maps before accessing them. Setting this on should fix some problems with OpenBSD. It should also make it possible to use index files over NFS as long as lock daemon is used. It might be such a good idea however. --HG-- branch : HEAD

New configuration file code. Some syntax changes, but tries to be somewhat backwards compatible. SIGHUP now reverts back to old configuration if it detected errors in new one. --HG-- branch : HEAD

Added imap_max_line_length setting to config file. --HG-- branch : HEAD

Added support for dynamically loadable imap/pop3 modules. --HG-- branch : HEAD

Added support for ANONYMOUS SASL mechanism. --HG-- branch : HEAD

Moved auth_username_chars from db-pgsql to generic for all. Some other auth code cleanups. --HG-- branch : HEAD

Added auth_default_realm (based on patch by Kristian Hoffmann) --HG-- branch : HEAD

Index opening rewrites. We don't try to support .imap.index-<hostname> style indexes anymore. They just made things more difficult, and it's really not a good idea to use index files via NFS anyway. Added support for :INDEX=MEMORY in MAIL env to disable using index files. Also if we can't open or create index file for any reason, we now fallback to in-memory indexes. Before we fallbacked only with out of disk space errors. If .customflags can't be created, we still work now by not allowing to create new custom flags. --HG-- branch : HEAD

Added setting verbose_ssl --HG-- branch : HEAD

Added setting mail_drop_priv_before_exec. --HG-- branch : HEAD

Support for IDLE extension. --HG-- branch : HEAD

Added setting to limit length of custom flag names. --HG-- branch : HEAD

Added mail_full_filesystem_access setting. Some of the setting variable types were declared wrong and caused Dovecot to crash if they were set in config file. --HG-- branch : HEAD

Added client_workarounds setting, with currently one workaround for OE6. --HG-- branch : HEAD

Moved settings parsing to lib-settings. --HG-- branch : HEAD