bcb4e51a409d94ae670de96afb8483a4f7855294 |
|
01-Jan-2018 |
Stephan Bosch <stephan.bosch@dovecot.fi> |
Updated copyright notices to include the year 2018. |
06704acb3bfbee17e463e16f98361be706855a04 |
|
07-Nov-2017 |
Timo Sirainen <timo.sirainen@dovecot.fi> |
*-login: Remove unnecessary ssl-proxy.h include |
d920a34dfe72ce74a362dae8083e021b4a1720ec |
|
07-Nov-2017 |
Timo Sirainen <timo.sirainen@dovecot.fi> |
*-login: Use io_add_istream() instead of io_add() |
5885eec2e3d74589c33aa5f59bf31e40df8ab583 |
|
02-Nov-2017 |
Timo Sirainen <timo.sirainen@dovecot.fi> |
pop3-login: Cleanup - uncork output unconditionally before client_unref() |
b84eff65e25ae86dfd6f798386577209b94838c6 |
|
16-Jun-2017 |
Timo Sirainen <timo.sirainen@dovecot.fi> |
*-login: Add client_vfuncs.free() that is called when client refcount=0
This can be useful for plugins that want to run something after proxying
ends.
Use an empty default function so plugins can call super.free() without
having to check if it's NULL. |
edfdc577ffe7408fd6463eb9dba11260d380ab53 |
|
13-Jun-2017 |
Timo Sirainen <timo.sirainen@dovecot.fi> |
*-login: Add client_vfuncs.input_next_cmd()
This allows plugins to hook into all the pre-login commands. For example
with imap-login most of the commands could already be hooked into, except
for ID and AUTHENTICATE because their parameters reading is handled
specially. This allows hooking into them as well.
This is actually internal to all the login binaries, so it wouldn't have to
be in login-common. However, login-common already has all the code to handle
overriding functions nicely and this is a rather useful feature for all the
protocols anyway, so it's easier this way and not too ugly. |
c57b69b830f4302319d7e3fd5647ad5eacbf15c3 |
|
13-Jun-2017 |
Timo Sirainen <timo.sirainen@dovecot.fi> |
pop3-login: Cleanup - move command handling to pop3_client_input_next_cmd() |
ae797f3368ebb86e7786ca25d7c9c703f672b9f5 |
|
21-Apr-2017 |
Timo Sirainen <timo.sirainen@dovecot.fi> |
*-login: Add client_vfuncs.send_raw_data()
This allows login plugins to hook into seeing all the data that is sent to
the imap/pop3 client. |
56af9dd10e7e6caeaca64395bad3f882b28ecdff |
|
06-Apr-2017 |
Timo Sirainen <timo.sirainen@dovecot.fi> |
*-login: Minor logging cleanup if client is disconnected before sending banner.
Avoid unnecessarily adding "(no auth attempts in 0 secs)" when the reason
string already makes it clear that the user didn't even have a chance to
authenticate.
This kind of disconnection currently happens only with some plugins. |
017d99aa1c9decec9e79d6183f61df97f35f5df2 |
|
19-Mar-2017 |
Aki Tuomi <aki.tuomi@dovecot.fi> |
pop3-login: Add FORWARD for XCLIENT
This allows passing passdb variables. They are prefixed
with forward_ when imported to extra fields. |
d77f679dac93f2416d6b04299b1a8154941036dd |
|
09-Mar-2017 |
Timo Sirainen <timo.sirainen@dovecot.fi> |
pop3-login: Log proxy state as human-readable string. |
2b96880f2d789d125aff6a95eaa7b51f558a6a1c |
|
09-Mar-2017 |
Timo Sirainen <timo.sirainen@dovecot.fi> |
*-login: Add client.proxy_get_state() for providing human-readable proxy state
If not implemented, it defaults to the old method of returning proxy_state
number. |
fd013f9c6ab4485e7aa7609a26ae5163ecbb1d37 |
|
10-Feb-2017 |
Timo Sirainen <timo.sirainen@dovecot.fi> |
pop3-login: Code cleanup - Make sure destroying client stops processing.
It would currently do it in any case, but this makes it clearer. |
2454dfa32c93c20a8522c6ed42fe057baaac9f9a |
|
01-Jan-2017 |
Stephan Bosch <stephan.bosch@dovecot.fi> |
Updated copyright notices to include the year 2017. |
a986ef3ac3b870942f57e781e9d2698b4f280b8e |
|
23-Mar-2016 |
Timo Sirainen <timo.sirainen@dovecot.fi> |
pop3-login: XCLIENT / XOIP no longer return -ERR for untrusted IP ranges.
The command is simply ignored, similarly to imap-login ID. |
02c335c23bf5fa225a467c19f2c063fb0dc7b8c3 |
|
12-Jan-2016 |
Timo Sirainen <timo.sirainen@dovecot.fi> |
global: freshen copyright
git ls-files | xargs perl -p -i -e 's/(\d+)-201[0-5]/$1-2016/g;s/ (201[0-5]) Dovecot/ $1-2016 Dovecot/' |
009217abb57a24a4076092e8e4e165545747839e |
|
29-Aug-2015 |
Stephan Bosch <stephan@rename-it.nl> |
Changed type of internet port values to in_port_t everywhere.
Created special SET_IN_PORT setting type for internet port values.
Created net_str2port() for parsing internet port values.
Removed several atoi() invocations in the process. |
0a9d52be3f50f9440e59c2797ad440e37b3ed8f6 |
|
29-Jun-2015 |
Timo Sirainen <tss@iki.fi> |
imap/pop3-login: If auth failure reason already begins with [resp-code], don't prefix it with another one. |
cd97e999be2a2de8e2455f34540b81e60c080447 |
|
02-Jun-2015 |
Timo Sirainen <tss@iki.fi> |
pop3-login: Added support for Zimbra proxy's XOIP command. |
9ab339518d78c82fe3bbb11b810fca8e41c301b8 |
|
06-Mar-2015 |
Timo Sirainen <tss@iki.fi> |
pop3-login: Disconnect client on 3rd invalid command (not 11th). |
7cb128dc4cae2a03a742f63ba7afee23c78e3af0 |
|
05-Jan-2015 |
Phil Carmody <phil@dovecot.fi> |
global: freshen copyright
Robomatically:
git ls-files | xargs perl -p -i -e 's/(\d+)-201[0-4]/$1-2015/g;s/ (201[0-4]) Dovecot/ $1-2015 Dovecot/'
Happy 2015 everyone!
Signed-off-by: Phil Carmody <phil@dovecot.fi> |
82fb1ead38f4e1197993adb2f9c12e26531e9c92 |
|
30-Oct-2014 |
Timo Sirainen <tss@iki.fi> |
*-login: And actually make the previous changes work. |
a8c5a86d183db25a57bf193c06b41e092ec2e151 |
|
04-Feb-2014 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2014. |
348d897426ff46ae23aaa432aff0087ce4d034d5 |
|
16-Feb-2013 |
Timo Sirainen <tss@iki.fi> |
pop3: Use RFC 3206 [SYS/*] and [AUTH] response codes. |
5a580c3a38ced62d4bcc95b8ac7c4f2935b5d294 |
|
02-Feb-2013 |
Timo Sirainen <tss@iki.fi> |
Oops :) Update copyrights to 2013 without breaking all .c files. |
cca4ba2a504d70a9fe9fee37f8433997359de52c |
|
02-Feb-2013 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2013. |
3281669db44d09a087a203201248abbc81b3cc1a |
|
06-Sep-2012 |
Timo Sirainen <tss@iki.fi> |
Renamed buffer_create_*data() to buffer_create_from_*data() for consistency.
Especially i_stream_create_from_data() was a very similar function, which
made it difficult to remember which one should have "from" and which one
shouldn't. |
b55f914c0ade77252cfd798ea8eb9a84bda56315 |
|
07-Mar-2012 |
Timo Sirainen <tss@iki.fi> |
Added a "session ID" string for imap/pop3 connections, available in %{session} variable.
The session ID passes through Dovecot IMAP/POP3 proxying to backend server.
The same session ID is can be reused after a long time (currently a bit
under 9 years). |
025668b21860730168193e7d55b9a2dd0b96a320 |
|
28-Feb-2012 |
Timo Sirainen <tss@iki.fi> |
pop3-login: Fixed APOP authentication, broken by recent changes. |
ddbdc644a15f56f4b43596f1b8c0fc196c101445 |
|
25-Feb-2012 |
Timo Sirainen <tss@iki.fi> |
imap/pop3/lmtp proxy: Implemented detection of proxy loops with TTL.
If proxying tries to continue after 5 forward connections, it fails. The
limit of 5 is hard coded currently. |
ad9da7356677de3b1176bbed0ec8a04e7a33ea03 |
|
25-Feb-2012 |
Timo Sirainen <tss@iki.fi> |
pop3-login: Implemented XCLIENT command for forwarding client ip/port from proxy. |
01cd9d4a8050a1dbf1da2c830f9755a45d6d004a |
|
25-Feb-2012 |
Timo Sirainen <tss@iki.fi> |
pop3-login: Implemented XCLIENT command for forwarding client ip/port from proxy. |
9f627b360ed38fdc54cb02ec5e67246c3f0d5b0f |
|
12-Feb-2012 |
Timo Sirainen <tss@iki.fi> |
login-common API made more extensible for different kinds of protocols.
Patch by Stephan Bosch. |
5f5870385cff47efd2f58e7892f251cf13761528 |
|
12-Feb-2012 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2012. |
afa4eb0295500d983e20484584d3e87a4651276c |
|
23-Nov-2011 |
Timo Sirainen <tss@iki.fi> |
login: Use AUTH_REQUEST_FLAG_SUPPORT_FINAL_RESP if protocol supports it. |
5a250816ffc4cc5db203f9410ea99b6601c7b91a |
|
30-Apr-2011 |
Timo Sirainen <tss@iki.fi> |
login-common API redesign so that the library doesn't refer to nonexistent variables. |
2e37d45867d081db150ab78dad303b9077aea24f |
|
04-Mar-2011 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2011. |
183bea41fa640dc8117f3eb45ff935cd81377a84 |
|
04-Mar-2011 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2011. |
dae0fbe100f1fd724518ee748306e306f31369e5 |
|
19-Aug-2010 |
Timo Sirainen <tss@iki.fi> |
pop3: Show APOP challenge only when APOP auth mechanism is enabled. |
7839797af86d5536124c67f09ede30df08cf678a |
|
14-Apr-2010 |
Timo Sirainen <tss@iki.fi> |
login: Keep binary-specific defaults in a struct.
--HG--
branch : HEAD |
2e2a1d720ed53490e8e5c5031e773d395bd5683d |
|
14-Apr-2010 |
Timo Sirainen <tss@iki.fi> |
login: If proxy returns ssl=yes and no port, switch port to imaps/pop3s.
--HG--
branch : HEAD |
d0c63a568f2413e9555753022f148b91199e1b8d |
|
20-Feb-2010 |
Timo Sirainen <tss@iki.fi> |
*-login: Change login_set_roots earlier.
--HG--
branch : HEAD |
e59faf65ce864fe95dc00f5d52b8323cdbd0608a |
|
25-Jan-2010 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2010.
--HG--
branch : HEAD |
46552a931924c2d743f045e95b08c3ce6beda91a |
|
02-Jan-2010 |
Timo Sirainen <tss@iki.fi> |
login-common: Renamed common.h to login-common.h
--HG--
branch : HEAD |
02752bc8d64df8cd361f464e55422f7b3f2f143e |
|
25-Nov-2009 |
Timo Sirainen <tss@iki.fi> |
Removed buffer_create_static_hard().
buffer_create_data() handles most of the situations where it was wanted.
--HG--
branch : HEAD |
d6ac422f6964d3dd79bcb4553c669547d8f1ba2a |
|
23-Nov-2009 |
Timo Sirainen <tss@iki.fi> |
pop3-login: Don't crash in QUIT command.
--HG--
branch : HEAD |
86791365b10f45982c88e70f2eb94fd6c3fea151 |
|
23-Oct-2009 |
Timo Sirainen <tss@iki.fi> |
Handle shutdown_clients globally for all services.
Delay shutting down processes until it's convenient for them, but if they're
not gone in 30 seconds forcibly stop. And if that doesn't help, master will
start killing them in 60 seconds.
--HG--
branch : HEAD |
1cfc0f014cd76717ec0ab185fb8363c5d6ec1543 |
|
23-Oct-2009 |
Timo Sirainen <tss@iki.fi> |
*-login: Make sure input isn't being handled while not connected to auth process.
--HG--
branch : HEAD |
f059a046515f4b2b15a6c2a10a6f12f6166e39a5 |
|
21-Oct-2009 |
Timo Sirainen <tss@iki.fi> |
imap-login: If imap_capability is set, use it.
--HG--
branch : HEAD |
7ceee001c11865a88a311c50c4430867b2d32ce6 |
|
12-Oct-2009 |
Timo Sirainen <tss@iki.fi> |
*-login: Login binaries can now set up their own private settings.
--HG--
branch : HEAD |
9137c55411aa39d41c1e705ddc34d5bd26c65021 |
|
07-Oct-2009 |
Timo Sirainen <tss@iki.fi> |
lib-auth: Changed API to connect to only a single specified auth socket.
Login processes now always connect to socket called "auth".
--HG--
branch : HEAD |
ec23e16ed879e289d12c6e1a5f9745dd3979004a |
|
11-Sep-2009 |
Timo Sirainen <tss@iki.fi> |
*-login: Fixes to SSL/login proxy connection counting.
--HG--
branch : HEAD |
46ec792dd4ccf6c34706c4774228301fafde6aa9 |
|
13-Aug-2009 |
Timo Sirainen <tss@iki.fi> |
*-login: Allow backend to parse SASL responses from client (for managesieve).
--HG--
branch : HEAD |
4c6ddf2491104f917d00e6900e833e80ea02c7b6 |
|
12-Aug-2009 |
Timo Sirainen <tss@iki.fi> |
*-login: Abstract out SASL continue reply sending (for managesieve).
--HG--
branch : HEAD |
05e55893a799de645fc8cd2203d6013f0e0f1b79 |
|
11-Aug-2009 |
Timo Sirainen <tss@iki.fi> |
*-login: Call client_vfuncs.destroy() on client_destroy(), not on unref.
--HG--
branch : HEAD |
e248fe370c4047cee921a91b48edc37944ab0526 |
|
10-Aug-2009 |
Timo Sirainen <tss@iki.fi> |
*-login: Moved most of the common code to login-common.
--HG--
branch : HEAD |
00fa8dcbc66f56daa737487c9dec7166c37de79e |
|
09-Aug-2009 |
Timo Sirainen <tss@iki.fi> |
*-login: Use a common client_send_line() API.
--HG--
branch : HEAD |
74ee5590487e89b25dffb58560ab1fea79fc21d9 |
|
10-Jul-2009 |
Timo Sirainen <tss@iki.fi> |
login processes: Auth code cleanups. Custom IMAP auth errors now have [ALERT] prefix.
This should make them visible in more clients.
--HG--
branch : HEAD |
9c60c8c5a01371657d29e4e91bc5562a1a7c4758 |
|
22-Jun-2009 |
Timo Sirainen <tss@iki.fi> |
login client idle timeout should be larger than auth request timeout, not vice versa.
--HG--
branch : HEAD |
4d4d6d4745682790c20d759ba93dbea46b812c5d |
|
22-May-2009 |
Timo Sirainen <tss@iki.fi> |
lib-master has now a global master_service variable that all binaries use.
There should always be only one of them anyway.
--HG--
branch : HEAD |
61ebb73ab16c1f8411f84a3f2826d9635e818677 |
|
15-May-2009 |
Timo Sirainen <tss@iki.fi> |
Crashfix to previous commit.
--HG--
branch : HEAD |
97db4761382024093f441e4bc78ba8b6a056504d |
|
15-May-2009 |
Timo Sirainen <tss@iki.fi> |
login processes: Added initial support for per-connection configuration.
--HG--
branch : HEAD |
6c2ce1d5bf17b21e804a079eb0f973b7ab83e0d8 |
|
06-May-2009 |
Timo Sirainen <tss@iki.fi> |
Implemented anvil service, which is used to implement mail_max_userip_connections.
--HG--
branch : HEAD |
d176f84ce5ca2073f4dfbafb457b9c74f6bf0d76 |
|
24-Apr-2009 |
Timo Sirainen <tss@iki.fi> |
Initial commit for v2.0 master rewrite. Several features are still missing.
--HG--
branch : HEAD |
cb80aa11a7bea079cc4a0ee7700ad6358e6edd71 |
|
02-Apr-2009 |
Timo Sirainen <tss@iki.fi> |
imap/pop3-login: Don't crash when shutting down and destroying clients.
--HG--
branch : HEAD |
a64adf62fa33f2463a86f990217b0c9078531a40 |
|
28-Jan-2009 |
Timo Sirainen <tss@iki.fi> |
Initial commit for config rewrite.
--HG--
branch : HEAD |
45312f52ff3a3d4c137447be4c7556500c2f8bf2 |
|
06-Jan-2009 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2009.
--HG--
branch : HEAD |
8372fc7efb6d64dff2e5f55fb4a3822c56869cfe |
|
21-Dec-2008 |
Timo Sirainen <tss@iki.fi> |
imap/pop3-login: Cleaned up proxying code. Don't disconnect client on proxy failures.
Log proxy failures as errors.
--HG--
branch : HEAD |
3557b4f31edaa9f9ae87f89e34b286cbc5c6992f |
|
19-Dec-2008 |
Timo Sirainen <tss@iki.fi> |
login: Reset idle timeout only when input is actually read from client.
This prevents client from just sending lots of failed authentication
attempts and then doing nothing for hours.
--HG--
branch : HEAD |
e5dec382163b476bed16dbf7eb470913a9bbdbe1 |
|
19-Dec-2008 |
Timo Sirainen <tss@iki.fi> |
Increase failed login's reply delay by 5 seconds for each failure.
Don't add any delays if passdb returned nodelay extra field.
Based on patch by Apple.
--HG--
branch : HEAD |
1bf0bb05c9b48349aae5eb092050dade146f9cd3 |
|
29-Oct-2008 |
Timo Sirainen <tss@iki.fi> |
Minor code cleanup.
--HG--
branch : HEAD |
38318f5e82662615cd88e99e398efe4a630ce020 |
|
19-Oct-2008 |
Timo Sirainen <tss@iki.fi> |
Login process: Log auth failure reasons better in disconnect message.
For example if client certs are required it now logs if the cert wasn't sent
or if the cert was invalid.
--HG--
branch : HEAD |
4de81f67714532d4e2a8e9d2a202e2f1ff15db76 |
|
25-Aug-2008 |
Timo Sirainen <tss@iki.fi> |
If client disconnects without any auth attempts, don't log "auth failed".
--HG--
branch : HEAD |
cd94aeaa294f7cc507206b4b2075852f00e14d61 |
|
20-Jun-2008 |
Timo Sirainen <tss@iki.fi> |
If commands are pipelined after the login command, pass them to the
IMAP/POP3 process so it can process the command instead of discarding it.
--HG--
branch : HEAD |
89795c6bbbc52bb382e88bc8617d22092223e9a5 |
|
21-Jun-2008 |
Timo Sirainen <tss@iki.fi> |
Support transferring original IPs and ports through IMAP proxies.
Clients from login_trusted_networks are allowed to override them. Dovecot's
IMAP proxy sends them via IMAP ID command. They're always sent if the remote
advertises ID in the banner's CAPABILITY.
--HG--
branch : HEAD |
afd0a4b74b14ba4d01175ab13fc5eeedff1e8b06 |
|
26-Mar-2008 |
Timo Sirainen <tss@iki.fi> |
Log clearly with "auth failed, # attempts" if user gets disconnected before
logging in.
--HG--
branch : HEAD |
caea325346da6fb1cf503b35a619467a997acbfa |
|
06-Jan-2008 |
Timo Sirainen <tss@iki.fi> |
Added clients_init() and clients_deinit() back (for Managesieve).
--HG--
branch : HEAD |
14ed5c9648dbafa1d3813912a2bd67eae87f979c |
|
03-Jan-2008 |
Timo Sirainen <tss@iki.fi> |
Minor cleanups
--HG--
branch : HEAD |
de1a3835af021e4b7e4013ef1be89a034f19197f |
|
03-Jan-2008 |
Timo Sirainen <tss@iki.fi> |
Use a linked list to keep track of all clients instead of a hash table.
--HG--
branch : HEAD |
2adb5a15be382d6a9f3b3ca35af39c0a168decc0 |
|
03-Jan-2008 |
Timo Sirainen <tss@iki.fi> |
Idle timeout should have been 180 seconds, not 180 milliseconds.
--HG--
branch : HEAD |
8e4e0f49d4221d506d9bf7fe6ce224fae3e34450 |
|
03-Jan-2008 |
Timo Sirainen <tss@iki.fi> |
Use separate per-client timeouts instead of going through all clients in one
timeout.
--HG--
branch : HEAD |
76b43e4417bab52e913da39b5f5bc2a130d3f149 |
|
01-Jan-2008 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2008.
--HG--
branch : HEAD |
02ccba3d3be96444abd15b5254864c9151bbeb30 |
|
11-Dec-2007 |
Timo Sirainen <tss@iki.fi> |
Instead of logging only "Aborted login", log also if client tried to use
plaintext auth, or if not log the number of authentication attempts.
--HG--
branch : HEAD |
eddd9bf1a1369aea4a2715f6be1137da6d17d293 |
|
05-Dec-2007 |
Timo Sirainen <tss@iki.fi> |
Replaced t_push/t_pop calls with T_FRAME*() macros.
--HG--
branch : HEAD |
f1e9954c699fcab107a3ebfe6be5fc32259d5646 |
|
22-Sep-2007 |
Timo Sirainen <tss@iki.fi> |
Renamed hash_size() -> hash_count().
--HG--
branch : HEAD |
89a126810703c666309310d0f3189e9834d70b5b |
|
16-Sep-2007 |
Timo Sirainen <tss@iki.fi> |
Replaced my Copyright notices. The year range always ends with 2007 now.
My name was replaced with "Dovecot authors". In many cases I didn't really
even own the copyright, so this is more correct.
--HG--
branch : HEAD |
ba00293b85c7fb4e7a2d100991c716e17b9daaae |
|
15-Sep-2007 |
Timo Sirainen <tss@iki.fi> |
hash_destroy() and hash_iterate_deinit() now take ** pointer.
--HG--
branch : HEAD |
43d32cbe60fdaef2699d99f1ca259053e9350411 |
|
16-Sep-2007 |
Timo Sirainen <tss@iki.fi> |
Renamed __attr_*__ to ATTR_*. Renamed __attrs_used__ to ATTRS_DEFINED.
--HG--
branch : HEAD |
2526d52441ef368215ab6bf04fd0356d3b09d235 |
|
02-Aug-2007 |
Timo Sirainen <tss@iki.fi> |
Renamed i_stream_create_file() to i_stream_create_fd().
--HG--
branch : HEAD |
93fa87cf1a96c4f279ec4f5c311820313ba12c34 |
|
02-Aug-2007 |
Timo Sirainen <tss@iki.fi> |
Split o_stream_create_file() to _create_fd() and _create_fd_file().
--HG--
branch : HEAD |
08a2d7172bba6d2a170e00717a01696124a7185d |
|
01-Aug-2007 |
Timo Sirainen <tss@iki.fi> |
If STARTTLS failed because max. number of connections for process was
reached, don't assert-crash.
--HG--
branch : HEAD |
fe363b433b8038a69b55169da9dca27892ad7d18 |
|
24-Jul-2007 |
Timo Sirainen <tss@iki.fi> |
Removed memory pool parameter from iostreams. Default pool was almost always
used, and the stream usually required destroying anyway so it didn't even
make freeing memory easier.
--HG--
branch : HEAD |
6017861170ded6e527aacef9f009d4a7243231e6 |
|
03-Jun-2007 |
Timo Sirainen <tss@iki.fi> |
Check idle timeouts only when there are clients connected.
--HG--
branch : HEAD |
d3dc8ba5ded7a2bc13dd084b0b3db532b6f11836 |
|
18-Mar-2007 |
Timo Sirainen <tss@iki.fi> |
Set login process's default_pool to system_clean_pool. Changed some
default_pool usages to system_pool directly where the cleaning doesn't
matter.
--HG--
branch : HEAD |
2cfe9983ce7a6280636ee12beccc2e865111967b |
|
15-Dec-2006 |
Timo Sirainen <tss@iki.fi> |
Replaced void *context from a lot of callbacks with the actual context
type. Also added/fixed some context type checks.
--HG--
branch : HEAD |
59151b71059df1190acd75d8717ed04a7920c862 |
|
15-Dec-2006 |
Timo Sirainen <tss@iki.fi> |
Added context parameter type safety checks for most callback APIs.
--HG--
branch : HEAD |
511a389ff61cb05b6151b8f5dd1d8819840b21d1 |
|
24-Nov-2006 |
Timo Sirainen <tss@iki.fi> |
Increase allowed pre-login idle timeout from 1 minute to 3 minutes. This
allows the user to type the password more slowly, although I haven't heard
this causing problems for anyone.
--HG--
branch : HEAD |
e9f1be99e92aeaad75158c4dd4dc384ea41cf0cd |
|
18-Nov-2006 |
Timo Sirainen <tss@iki.fi> |
More const fixes
--HG--
branch : HEAD |
14fabfe6ffd53d2cd27df5f55742e9bc0f56d512 |
|
12-Nov-2006 |
Timo Sirainen <tss@iki.fi> |
Fixed potential problems with client disconnecting while master was handling
the login.
--HG--
branch : HEAD |
b3ae85f3552d98bb2f7a6efd8039e1d3f0423058 |
|
07-Nov-2006 |
Timo Sirainen <tss@iki.fi> |
Memory leak fix
--HG--
branch : HEAD |
feb665db52583259a1f42037c6e8a22852aa8889 |
|
07-Nov-2006 |
Timo Sirainen <tss@iki.fi> |
Crashfixes and more asserts. Mostly related to use of AUTHENTICATE/AUTH
commands.
--HG--
branch : HEAD |
c3c93f9f68be8c73150a97d2fa2857f415234bea |
|
14-Oct-2006 |
Timo Sirainen <tss@iki.fi> |
Reference counting fix
--HG--
branch : HEAD |
16d07eb86f82da6389cb06cbe77e12bbb0a6c103 |
|
14-Oct-2006 |
Timo Sirainen <tss@iki.fi> |
Reference counter fixing for client while it's being used in login proxy.
Fixes crashes.
--HG--
branch : HEAD |
1e31e1f1361f8bea73357371a851196b16606ceb |
|
13-Oct-2006 |
Timo Sirainen <tss@iki.fi> |
New asserts / cleanup
--HG--
branch : HEAD |
71f1783adc89b4fe3588c72b23e059b320da8fad |
|
10-Aug-2006 |
Timo Sirainen <tss@iki.fi> |
Fixes for handling near-full connection queues.
--HG--
branch : HEAD |
61e87c7e1e53a1fdd3680c7b1addd187282e1327 |
|
06-Aug-2006 |
Timo Sirainen <tss@iki.fi> |
Fixes to login process handling, especially with
login_process_per_connection=no. Removed login_max_logging_users setting
since it was somewhat weird in how it worked. Added login_max_connections to
replace it with login_process_per_connection=no, and with =yes its
functionality is now within login_max_processes_count.
--HG--
branch : HEAD |
1aa03a953c6b3071e9ec75017ed180acf73e50c0 |
|
01-Jul-2006 |
Timo Sirainen <tss@iki.fi> |
Removed hardcoded 127.* and ::1 IP checks. Instead just check that local IP
matches remote IP to assume the connection is secure.
--HG--
branch : HEAD |
f5161c335fa66d9916c470b6dddf428c1f1bbf04 |
|
12-Apr-2006 |
Timo Sirainen <tss@iki.fi> |
Add a space between POP3 greeting and APOP challenge
--HG--
branch : HEAD |
2b1d4aea1ab37aae26059dc2d529451debb93936 |
|
02-Apr-2006 |
Timo Sirainen <tss@iki.fi> |
Same STARTTLS flush callback fix as with imap-login.
--HG--
branch : HEAD |
549b6e0f16c1d4102660473cbb7f5afc28b4e055 |
|
28-Jan-2006 |
Timo Sirainen <tss@iki.fi> |
If client disconnected while we were trying to send authentication
continuation to it, we crashed.
--HG--
branch : HEAD |
243f227de72be008a67ce7dce6d1c43b9b94df5b |
|
28-Jan-2006 |
Timo Sirainen <tss@iki.fi> |
Added asserts
--HG--
branch : HEAD |
d5cebe7f98e63d4e2822863ef2faa4971e8b3a5d |
|
14-Jan-2006 |
Timo Sirainen <tss@iki.fi> |
deinit, unref, destroy, close, free, etc. functions now take a pointer to
their data pointer, and set it to NULL. This makes double-frees less likely
to cause security holes.
--HG--
branch : HEAD |
6ef7e31619edfaa17ed044b45861d106a86191ef |
|
13-Jan-2006 |
Timo Sirainen <tss@iki.fi> |
Added "bool" type and changed all ints that were used as booleans to bool.
--HG--
branch : HEAD |
eba1d32132ec6dda10602725ce02db2901b01294 |
|
18-Sep-2005 |
Timo Sirainen <tss@iki.fi> |
Make sure corking is removed before calling ssl_proxy_new()
--HG--
branch : HEAD |
9439bed2f07d6475febd8a247cd2f0990fb32a13 |
|
14-May-2005 |
Timo Sirainen <tss@iki.fi> |
Added configurable logging for login process. Added configurable pop3 logout
string. Based on a patch by Andrey Panin.
--HG--
branch : HEAD |
cee8783b40aaef17fa8662ffd811ac87e58095ac |
|
08-May-2005 |
Timo Sirainen <tss@iki.fi> |
STARTTLS was broken
--HG--
branch : HEAD |
094bc1594ad9c9873b2a88d69dcdbff6eb84e2c1 |
|
30-Jan-2005 |
Timo Sirainen <tss@iki.fi> |
compile fix
--HG--
branch : HEAD |
925e0bd850801f9b9900b5f27f0380cf0821f160 |
|
30-Jan-2005 |
Timo Sirainen <tss@iki.fi> |
Treat ::ffff:127.* addresses as secure as well.
--HG--
branch : HEAD |
9eedd38c2985596fb692dcca62193379d34c4c5b |
|
09-Jan-2005 |
Timo Sirainen <tss@iki.fi> |
Require a valid timestamp in APOP challenge.
--HG--
branch : HEAD |
a4d25b6338f20660054d4286c6fa06648cb77ee2 |
|
28-Nov-2004 |
Timo Sirainen <tss@iki.fi> |
Don't destroy client structure immediately when sending line fails. Fixes some writes to freed memory.
--HG--
branch : HEAD |
65cf1e1cb1aa8b31a7b8b33e95a129223516f1e7 |
|
25-Nov-2004 |
Timo Sirainen <tss@iki.fi> |
Username given in USER was was not freed when destroying client.
--HG--
branch : HEAD |
c061b52fd7a719c2dc07d0c3b6d4fc445110567e |
|
28-Oct-2004 |
Timo Sirainen <tss@iki.fi> |
crashfixes
--HG--
branch : HEAD |
211ed7806d8715ec2280ffbf5d10f0d6e4f1beb2 |
|
20-Oct-2004 |
Timo Sirainen <tss@iki.fi> |
Changed ostream's flush callback to have return value which can tell if
there are more bytes to be sent even if there is none in output buffer
itself. Fixes FETCH commands which used o_stream_send_istream() getting
stuck.
--HG--
branch : HEAD |
0c77590df05dc7ce340ea5f0d8d91534cea4f14e |
|
19-Oct-2004 |
Timo Sirainen <tss@iki.fi> |
crashfixes
--HG--
branch : HEAD |
f30577ff7cf29858f1878abe963b4f40a436434f |
|
19-Oct-2004 |
Timo Sirainen <tss@iki.fi> |
More smart IMAP and POP3 proxies. Now if remote login fails, it just
destroys the proxy and allows trying another username which can go elsewhere.
Also now replies with the same old "Authentication failed" error message
instead of showing remote server's failure message.
--HG--
branch : HEAD |
ba90e657bc68a72ab3b3021e2f4a874fac9965ba |
|
18-Oct-2004 |
Timo Sirainen <tss@iki.fi> |
Added IMAP and POP3 proxying support.
--HG--
branch : HEAD |
0442399c3ad313d6f5267c182ddb9012e525941d |
|
18-Oct-2004 |
Timo Sirainen <tss@iki.fi> |
Implemented support for LOGIN-REFERRALS using "referral" and "reason"
parameters from auth server.
--HG--
branch : HEAD |
486103ca607f8546d23e3279e6be106a0858edf0 |
|
18-Oct-2004 |
Timo Sirainen <tss@iki.fi> |
tls/secured variables are in common client structure. Plaintext logins
didn't work because of this when disable_plaintext_auth = yes, even if SSL
was used.
--HG--
branch : HEAD |
c49a19168dab6fda80aee16ad799a8a56d3bc18f |
|
11-Oct-2004 |
Timo Sirainen <tss@iki.fi> |
Login process cleanups. Share more authentication code between pop3/imap.
--HG--
branch : HEAD |
b12eeefe58793031ebf4cff240a39ca33680b6e8 |
|
05-Oct-2004 |
Timo Sirainen <tss@iki.fi> |
auth_verbose now affects imap/pop3 login processes too. Every authentication
attempt by client is logged. Also fixed replies in AUTHENTICATE/AUTH
commands when it was aborted by client.
--HG--
branch : HEAD |
f8858e2068aebd9cdb0b0807afdf91595a1d97bb |
|
27-Sep-2004 |
Timo Sirainen <tss@iki.fi> |
Added login_greeting and login_greeting_capability settings.
--HG--
branch : HEAD |
66fb5e63d0f5bfc74c2afe080e52e790890171c2 |
|
12-Sep-2004 |
Timo Sirainen <tss@iki.fi> |
Replaced timestamp in APOP challenge with 128 bits of randomness.
--HG--
branch : HEAD |
2767104d81e97a109f0aa9758792bfa1da325a97 |
|
15-Aug-2004 |
Timo Sirainen <tss@iki.fi> |
We never do blocking reads/writes to network anymore. Changed imap and pop3
processes to use a single I/O loop.
Not much tested yet, and currently LIST/LSUB may eat too much memory and
APPEND eats all CPU.
--HG--
branch : HEAD |
eb05765777cf968a7fb784602c310a8a418156a1 |
|
06-Jul-2004 |
Timo Sirainen <tss@iki.fi> |
Fixes, patch by Andrey Panin
--HG--
branch : HEAD |
43f92093032829a1938672f0e32e20a0fae95a36 |
|
02-Jul-2004 |
Timo Sirainen <tss@iki.fi> |
If we're not connected to all auth sockets, wait before sending greeting so
APOP challenge gets sent.
--HG--
branch : HEAD |
8eea67470c1bd8562a62e7445d930bb2079b1a43 |
|
03-Jul-2004 |
Timo Sirainen <tss@iki.fi> |
Added APOP authentication for POP3. Patch by Andrey Panin.
This required some changes in auth APIs.
--HG--
branch : HEAD |
64e244defe74f513ce94f33d000a048ddbe2ea23 |
|
31-May-2004 |
Timo Sirainen <tss@iki.fi> |
Added %l, %r and %P variables and mail_log_prefix setting.
--HG--
branch : HEAD |
04d0cb8d447c468c6128f03c90a5f4b43c644d42 |
|
25-May-2004 |
Timo Sirainen <tss@iki.fi> |
cleanup: str_*case(t_strdup_noconst(str)) -> t_str_*case(str)
--HG--
branch : HEAD |
8222ce68120b51353a3b31d3073b5f845d0e9f53 |
|
17-May-2004 |
Timo Sirainen <tss@iki.fi> |
Added ssl_require_client_cert auth-specific setting. Hide
ssl_verify_client_cert from default config file as it's automatically set if
needed and there's not much point in forcing it.
--HG--
branch : HEAD |
9e7182d6fa1940ec14cc2938699820b68ee1dc0d |
|
03-Dec-2003 |
Timo Sirainen <tss@iki.fi> |
Changed hash_foreach() to iterator.
--HG--
branch : HEAD |
cd466fe7b84b0223735a6469c7f7bc225f65996d |
|
21-Sep-2003 |
Timo Sirainen <tss@iki.fi> |
data_stack_pool split into two: unsafe_data_stack_pool which works like
before, and a new one which verifies that stack frame stays the same
whenever the pool is accessed.
--HG--
branch : HEAD |
31e020ffe023c80d3dc70d3625c0633187620638 |
|
24-Aug-2003 |
Timo Sirainen <tss@iki.fi> |
disable_plaintext_auth defaults to yes now. ipv4 127.* and ipv6 ::1
addresses are considered secure however and plaintext authentication is
allowed from them.
--HG--
branch : HEAD |
235cb7d2446d5c2e25962e5c461f51fe6579c581 |
|
22-Aug-2003 |
Timo Sirainen <tss@iki.fi> |
fixes. maybe it works now.
--HG--
branch : HEAD |
2a90d8a14b0e7cc1508814bc87d3dfa598ef46a8 |
|
22-Aug-2003 |
Timo Sirainen <tss@iki.fi> |
Moved client side code for auth process handling to lib-auth. Some other login process cleanups.
--HG--
branch : HEAD |
007d354a674fb3ddf49db160cf050cf61270a1a0 |
|
23-May-2003 |
Timo Sirainen <tss@iki.fi> |
Removed I/O priorities. They were pretty much useless and were just getting
in way.
--HG--
branch : HEAD |
ce9cbf691047f7130f930101fbf9ff89af71deaf |
|
18-May-2003 |
Timo Sirainen <tss@iki.fi> |
s/host/addr/ in variables
--HG--
branch : HEAD |
e95baea87aa5d7a10749c39c8ff81a2632ceadf3 |
|
18-May-2003 |
Timo Sirainen <tss@iki.fi> |
s/host/addr/ in a few network functions
--HG--
branch : HEAD |
210a55c1e7183def859be97976859f5a24d3483c |
|
04-Mar-2003 |
Timo Sirainen <tss@iki.fi> |
login: Wait until we're connected to auth process before executing command
from client.
inetd usage: --group=name can now specify which login group to use. Default
is the binary name before '-' character (ie. imap or pop3).
--HG--
branch : HEAD |
5088da7d8cbfe6dcde8e2f34d09d9107f3cb0c9d |
|
23-Feb-2003 |
Timo Sirainen <tss@iki.fi> |
Added setting verbose_ssl
--HG--
branch : HEAD |
851e9036cb96ec72f433a491d47a0049d0cda3f8 |
|
11-Feb-2003 |
Timo Sirainen <tss@iki.fi> |
Make sure calling client_destroy() multiple times doesn't break anything.
--HG--
branch : HEAD |
82ecb249978abea0ff5f435bb0ad23db262aaa3a |
|
08-Feb-2003 |
Timo Sirainen <tss@iki.fi> |
STARTTLS handshake failure fixes.
--HG--
branch : HEAD |
bf72c930996df0691932fb1143f360d260f27a06 |
|
01-Feb-2003 |
Timo Sirainen <tss@iki.fi> |
Moved more auth code to login-common.
--HG--
branch : HEAD |
345648b341f228bd7f0b89f8aa3ecb9c470d817e |
|
01-Feb-2003 |
Timo Sirainen <tss@iki.fi> |
auth: kill login connection if it leaves requests hanging too long.
--HG--
branch : HEAD |
dd948926f096bae91e965fbb4e0d01f4ca7f00bb |
|
02-Feb-2003 |
Timo Sirainen <tss@iki.fi> |
STARTTLS commands crashed. imap-login STARTTLS also ignored next command.
--HG--
branch : HEAD |
e3a317209a903361987b60ccd763de72dfa174b9 |
|
30-Jan-2003 |
Timo Sirainen <tss@iki.fi> |
Support for CAPA command (rfc2449).
--HG--
branch : HEAD |
0765663067cad49a0a44f79baec278cca055ea05 |
|
30-Jan-2003 |
Timo Sirainen <tss@iki.fi> |
compile fix + complain about unknown commands
--HG--
branch : HEAD |
c0a708fa3f7b8f4fbca32052da5faf7a0125189d |
|
28-Jan-2003 |
Timo Sirainen <tss@iki.fi> |
Moved common login process code to login-common, created pop3-login.
--HG--
branch : HEAD |