bcb4e51a409d94ae670de96afb8483a4f7855294 |
|
01-Jan-2018 |
Stephan Bosch <stephan.bosch@dovecot.fi> |
Updated copyright notices to include the year 2018. |
67ac9e1493601933d3d4eb2d30893e0d84d2a5b5 |
|
19-Mar-2017 |
Aki Tuomi <aki.tuomi@dovecot.fi> |
pop3-login: Pass forward_ passdb args using XCLIENT command |
339726ad7f9f8b787ced3cd12042d0c29938de3d |
|
09-Mar-2017 |
Timo Sirainen <timo.sirainen@dovecot.fi> |
pop3-login: Remove usage of client.common.proxy_state |
d77f679dac93f2416d6b04299b1a8154941036dd |
|
09-Mar-2017 |
Timo Sirainen <timo.sirainen@dovecot.fi> |
pop3-login: Log proxy state as human-readable string. |
2454dfa32c93c20a8522c6ed42fe057baaac9f9a |
|
01-Jan-2017 |
Stephan Bosch <stephan.bosch@dovecot.fi> |
Updated copyright notices to include the year 2017. |
efe78d3ba24fc866af1c79b9223dc0809ba26cad |
|
24-Dec-2016 |
Stephan Bosch <stephan.bosch@dovecot.fi> |
global: Replaced all instances of memset(p, 0, sizeof(*p)) with the new i_zero() macro.
Used the following script:
C_FILES=`git ls-files *.c`
H_FILES=`git ls-files *.h`
for F in "$C_FILES $H_FILES"; do
echo "$F"
perl -p -i -e 's/safe_memset\(&\(?([^,]*)\)?,\s*0,\s*sizeof\(\g1\)\)/i_zero_safe(&$1)/g' $F
perl -p -i -e 's/safe_memset\(([^,]*),\s*0,\s*sizeof\(\*\g1\)\)/i_zero_safe($1)/g' $F
perl -p -i -e 's/memset\(&\(?([^,]*)\)?,\s*0,\s*sizeof\(\g1\)\)/i_zero(&$1)/g' $F
perl -p -i -e 's/memset\(([^,]*),\s*0,\s*sizeof\(\*\g1\)\)/i_zero($1)/g' $F
done |
2c5c293940fd6c7e020e1d58dae77a9d01f9059b |
|
23-Dec-2016 |
Timo Sirainen <timo.sirainen@dovecot.fi> |
*-login, imapc: Fix new lib-sasl API usage
Forgot to include these in a669d351502e15802b121e1a0bd83f27d1d95f01 |
6d24551e169c0808695db35d7a228f1970a84c75 |
|
01-Nov-2016 |
Timo Sirainen <timo.sirainen@dovecot.fi> |
imap/pop3 proxy: If passdb returns proxy_not_trusted, don't send ID/XCLIENT
This allows using Dovecot proxying feature towards less trusted servers. |
02c335c23bf5fa225a467c19f2c063fb0dc7b8c3 |
|
12-Jan-2016 |
Timo Sirainen <timo.sirainen@dovecot.fi> |
global: freshen copyright
git ls-files | xargs perl -p -i -e 's/(\d+)-201[0-5]/$1-2016/g;s/ (201[0-5]) Dovecot/ $1-2016 Dovecot/' |
7cb128dc4cae2a03a742f63ba7afee23c78e3af0 |
|
05-Jan-2015 |
Phil Carmody <phil@dovecot.fi> |
global: freshen copyright
Robomatically:
git ls-files | xargs perl -p -i -e 's/(\d+)-201[0-4]/$1-2015/g;s/ (201[0-4]) Dovecot/ $1-2015 Dovecot/'
Happy 2015 everyone!
Signed-off-by: Phil Carmody <phil@dovecot.fi> |
a8c5a86d183db25a57bf193c06b41e092ec2e151 |
|
04-Feb-2014 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2014. |
de754cb78f75e8b3b994cddafe41c9ed1467c33d |
|
26-Jun-2013 |
Timo Sirainen <tss@iki.fi> |
lib-sasl: Use dsasl_ prefix so we don't conflict with Cyrus SASL library. |
26681e71837ebbb3eb92455ec4e3cadefa710f82 |
|
18-Jun-2013 |
Timo Sirainen <tss@iki.fi> |
imap/pop3 proxy: Master user logins were broken by lib-sasl change. |
d229d26d263a57a77eec8fe7cba24fbfd9509966 |
|
16-Jun-2013 |
Timo Sirainen <tss@iki.fi> |
Make static analyzer happier. |
1093de32efb2a231949566d4bd8aa55a8f43fb70 |
|
09-Jun-2013 |
Timo Sirainen <tss@iki.fi> |
imap/pop3-login: Use libsasl for authenticating to remote IMAP/POP3 server.
Also passdb lookup can return "proxy_mech" extra field to specify which SASL
mechanism to use. |
9508ac436fff0e1dcea975855c139cd251deb703 |
|
21-Feb-2013 |
Timo Sirainen <tss@iki.fi> |
proxying cleanup: Send TTL=1 (instead of TTL=0) as "no more proxying". |
5a580c3a38ced62d4bcc95b8ac7c4f2935b5d294 |
|
02-Feb-2013 |
Timo Sirainen <tss@iki.fi> |
Oops :) Update copyrights to 2013 without breaking all .c files. |
cca4ba2a504d70a9fe9fee37f8433997359de52c |
|
02-Feb-2013 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2013. |
e2a88d59c0d47d63ce1ad5b1fd95e487124a3fd4 |
|
24-Jun-2012 |
Timo Sirainen <tss@iki.fi> |
Added o_stream_nsend*() and related functions to make delayed error handling safer.
Once o_stream_nsend*() is called, o_stream_nfinish() must be called before
stream is destroyed to finish checking if there were any errors. If
something failed and the stream is just wanted to be closed,
o_stream_ignore_last_errors() can be called.
For streams where errors don't really make any difference (network sockets)
you can call o_stream_set_no_error_handling() immediately after creating the
stream. |
b55f914c0ade77252cfd798ea8eb9a84bda56315 |
|
07-Mar-2012 |
Timo Sirainen <tss@iki.fi> |
Added a "session ID" string for imap/pop3 connections, available in %{session} variable.
The session ID passes through Dovecot IMAP/POP3 proxying to backend server.
The same session ID is can be reused after a long time (currently a bit
under 9 years). |
ddbdc644a15f56f4b43596f1b8c0fc196c101445 |
|
25-Feb-2012 |
Timo Sirainen <tss@iki.fi> |
imap/pop3/lmtp proxy: Implemented detection of proxy loops with TTL.
If proxying tries to continue after 5 forward connections, it fails. The
limit of 5 is hard coded currently. |
f80bf96f8cd5fc5b8ac7403c9991677e113c9ae3 |
|
25-Feb-2012 |
Timo Sirainen <tss@iki.fi> |
pop3 proxy: Fixed previous change not to hang. |
ac84cb764c3a6f4b4b9ded2510d425fb5744dfe8 |
|
25-Feb-2012 |
Timo Sirainen <tss@iki.fi> |
pop3 proxy: Fixed previous change not to hang. |
2510f24a486af5cf41a98f29bcde1ae6dea43ad7 |
|
25-Feb-2012 |
Timo Sirainen <tss@iki.fi> |
pop3 proxy: Fixed handling XCLIENT reply. |
ab45534d66792946b5794ab99a843d2f2b1d556f |
|
25-Feb-2012 |
Timo Sirainen <tss@iki.fi> |
pop3 proxy: Fixed handling XCLIENT reply. |
ad9da7356677de3b1176bbed0ec8a04e7a33ea03 |
|
25-Feb-2012 |
Timo Sirainen <tss@iki.fi> |
pop3-login: Implemented XCLIENT command for forwarding client ip/port from proxy. |
01cd9d4a8050a1dbf1da2c830f9755a45d6d004a |
|
25-Feb-2012 |
Timo Sirainen <tss@iki.fi> |
pop3-login: Implemented XCLIENT command for forwarding client ip/port from proxy. |
9f627b360ed38fdc54cb02ec5e67246c3f0d5b0f |
|
12-Feb-2012 |
Timo Sirainen <tss@iki.fi> |
login-common API made more extensible for different kinds of protocols.
Patch by Stephan Bosch. |
5f5870385cff47efd2f58e7892f251cf13761528 |
|
12-Feb-2012 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2012. |
80980955bb1bbcc1bd73623fe0912f334194ddd2 |
|
27-Jan-2012 |
Timo Sirainen <tss@iki.fi> |
login proxy: If remote auth fails, say so in disconnect message instead of "internal failure". |
ac45ba9c603b67cc43fa7bceffdef0a19100720b |
|
27-Jan-2012 |
Timo Sirainen <tss@iki.fi> |
login: More verbose_auth -> auth_verbose changes. |
2e37d45867d081db150ab78dad303b9077aea24f |
|
04-Mar-2011 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2011. |
183bea41fa640dc8117f3eb45ff935cd81377a84 |
|
04-Mar-2011 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2011. |
3612ee5c737954d5fb88fd1775aad80f7bf1dc4e |
|
12-Aug-2010 |
Timo Sirainen <tss@iki.fi> |
login proxy: Show proxy state in "disconnected" error message. |
e59faf65ce864fe95dc00f5d52b8323cdbd0608a |
|
25-Jan-2010 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2010.
--HG--
branch : HEAD |
46552a931924c2d743f045e95b08c3ce6beda91a |
|
02-Jan-2010 |
Timo Sirainen <tss@iki.fi> |
login-common: Renamed common.h to login-common.h
--HG--
branch : HEAD |
e248fe370c4047cee921a91b48edc37944ab0526 |
|
10-Aug-2009 |
Timo Sirainen <tss@iki.fi> |
*-login: Moved most of the common code to login-common.
--HG--
branch : HEAD |
00fa8dcbc66f56daa737487c9dec7166c37de79e |
|
09-Aug-2009 |
Timo Sirainen <tss@iki.fi> |
*-login: Use a common client_send_line() API.
--HG--
branch : HEAD |
97db4761382024093f441e4bc78ba8b6a056504d |
|
15-May-2009 |
Timo Sirainen <tss@iki.fi> |
login processes: Added initial support for per-connection configuration.
--HG--
branch : HEAD |
e95dba8921087afebb8a92c592af3b8ca22ae796 |
|
29-Apr-2009 |
Timo Sirainen <tss@iki.fi> |
imap/pop3 proxy: Support SSL/TLS connections to remote servers.
passdb can return ssl=yes, ssl=any-cert and starttls options.
--HG--
branch : HEAD |
d176f84ce5ca2073f4dfbafb457b9c74f6bf0d76 |
|
24-Apr-2009 |
Timo Sirainen <tss@iki.fi> |
Initial commit for v2.0 master rewrite. Several features are still missing.
--HG--
branch : HEAD |
e3a838c80f54f024115fade93c6c87a0998f1fab |
|
07-Apr-2009 |
Timo Sirainen <tss@iki.fi> |
imap-login: Use [resp-codes] to figure out when to replace remote's auth failed message with ours.
--HG--
branch : HEAD |
f8a78c816b4dbfda42f13d8ee152e0cdb28c6a4a |
|
24-Feb-2009 |
Timo Sirainen <tss@iki.fi> |
pop3-login: Don't crash after successful login.
--HG--
branch : HEAD |
a64adf62fa33f2463a86f990217b0c9078531a40 |
|
28-Jan-2009 |
Timo Sirainen <tss@iki.fi> |
Initial commit for config rewrite.
--HG--
branch : HEAD |
45312f52ff3a3d4c137447be4c7556500c2f8bf2 |
|
06-Jan-2009 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2009.
--HG--
branch : HEAD |
8372fc7efb6d64dff2e5f55fb4a3822c56869cfe |
|
21-Dec-2008 |
Timo Sirainen <tss@iki.fi> |
imap/pop3-login: Cleaned up proxying code. Don't disconnect client on proxy failures.
Log proxy failures as errors.
--HG--
branch : HEAD |
ccef83820a01bb37ad48653a05a9c5aa6560826a |
|
14-Dec-2008 |
Timo Sirainen <tss@iki.fi> |
imap/pop3 proxy: Support master user logins.
--HG--
branch : HEAD |
6e8ad595d0603295f57bef576da8a3a00b55c5e2 |
|
29-Aug-2008 |
Timo Sirainen <tss@iki.fi> |
imap/pop3-proxy: If auth_verbose=yes, log proxy login failures.
--HG--
branch : HEAD |
d67848ba944a3172c4834c591ddc921fa4ff16b1 |
|
14-Aug-2008 |
Timo Sirainen <tss@iki.fi> |
Proxy: Log destuser in the "proxying" line if it's different from username.
--HG--
branch : HEAD |
cd94aeaa294f7cc507206b4b2075852f00e14d61 |
|
20-Jun-2008 |
Timo Sirainen <tss@iki.fi> |
If commands are pipelined after the login command, pass them to the
IMAP/POP3 process so it can process the command instead of discarding it.
--HG--
branch : HEAD |
8e50329e2c5e3a199674ae9f6d3dfcddab02487b |
|
24-Apr-2008 |
Timo Sirainen <tss@iki.fi> |
Send the success reply in one write. Based on patch by Onno Molenkamp.
--HG--
branch : HEAD |
afd0a4b74b14ba4d01175ab13fc5eeedff1e8b06 |
|
26-Mar-2008 |
Timo Sirainen <tss@iki.fi> |
Log clearly with "auth failed, # attempts" if user gets disconnected before
logging in.
--HG--
branch : HEAD |
4b6ddd3770c8484da7308032b75fc93b91aa1b49 |
|
06-Feb-2008 |
Timo Sirainen <tss@iki.fi> |
If proxy fails to log in to the backend server, forward the error message
instead of always replying with a generic "Authentication failed", which
could hide temporary failure and "too many connections" errors. However if
the backend isn't Dovecot, this could allow an attacker to find out what
users exist on the system.
--HG--
branch : HEAD |
45155bb1250cf5a120278f349465aded513a100f |
|
06-Jan-2008 |
Timo Sirainen <tss@iki.fi> |
Make sure all user input is sanitized before it's logged.
--HG--
branch : HEAD |
76b43e4417bab52e913da39b5f5bc2a130d3f149 |
|
01-Jan-2008 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2008.
--HG--
branch : HEAD |
89a126810703c666309310d0f3189e9834d70b5b |
|
16-Sep-2007 |
Timo Sirainen <tss@iki.fi> |
Replaced my Copyright notices. The year range always ends with 2007 now.
My name was replaced with "Dovecot authors". In many cases I didn't really
even own the copyright, so this is more correct.
--HG--
branch : HEAD |
d7cd49f01fad7c87c5a0865ebf54a548275e9fee |
|
15-Feb-2007 |
Timo Sirainen <tss@iki.fi> |
Don't crash if the remote server disconnects before we're logged in.
--HG--
branch : HEAD |
1eff76c5dbd2ff14bbb7e40a164c290931bdf692 |
|
19-Jan-2007 |
Timo Sirainen <tss@iki.fi> |
Log the proxy destination host:port.
--HG--
branch : HEAD |
2cfe9983ce7a6280636ee12beccc2e865111967b |
|
15-Dec-2006 |
Timo Sirainen <tss@iki.fi> |
Replaced void *context from a lot of callbacks with the actual context
type. Also added/fixed some context type checks.
--HG--
branch : HEAD |
9362c5623da599e4bb6ba8e9780c12b01ba6ce2d |
|
03-Dec-2006 |
Timo Sirainen <tss@iki.fi> |
Fixed crash with proxying.
--HG--
branch : HEAD |
b3ae85f3552d98bb2f7a6efd8039e1d3f0423058 |
|
07-Nov-2006 |
Timo Sirainen <tss@iki.fi> |
Memory leak fix
--HG--
branch : HEAD |
feb665db52583259a1f42037c6e8a22852aa8889 |
|
07-Nov-2006 |
Timo Sirainen <tss@iki.fi> |
Crashfixes and more asserts. Mostly related to use of AUTHENTICATE/AUTH
commands.
--HG--
branch : HEAD |
16d07eb86f82da6389cb06cbe77e12bbb0a6c103 |
|
14-Oct-2006 |
Timo Sirainen <tss@iki.fi> |
Reference counter fixing for client while it's being used in login proxy.
Fixes crashes.
--HG--
branch : HEAD |
71f1783adc89b4fe3588c72b23e059b320da8fad |
|
10-Aug-2006 |
Timo Sirainen <tss@iki.fi> |
Fixes for handling near-full connection queues.
--HG--
branch : HEAD |
d5cebe7f98e63d4e2822863ef2faa4971e8b3a5d |
|
14-Jan-2006 |
Timo Sirainen <tss@iki.fi> |
deinit, unref, destroy, close, free, etc. functions now take a pointer to
their data pointer, and set it to NULL. This makes double-frees less likely
to cause security holes.
--HG--
branch : HEAD |
d20984be93d8d695e054c90ff05ca46837e2b942 |
|
09-Jan-2005 |
Timo Sirainen <tss@iki.fi> |
If login failed, send it as "-ERR [IN-USE]" rather as IMAP's "* BYE"..
--HG--
branch : HEAD |
c0594b0763a084d2648e0df8c9b525ef094cceda |
|
07-Jan-2005 |
Timo Sirainen <tss@iki.fi> |
proxy: When we can't connect to remote server, show "Temporary login
failure." error to client instead of internal error.
--HG--
branch : HEAD |
b8422738d3c891c7c93294b027a5cfe7d520e378 |
|
04-Nov-2004 |
Timo Sirainen <tss@iki.fi> |
Check that PASS replies with OK.
--HG--
branch : HEAD |
ab1236617440e654d5c5a043b677512714b788dd |
|
27-Oct-2004 |
Timo Sirainen <tss@iki.fi> |
Keep proxy_user stored until proxy is destroyed.
--HG--
branch : HEAD |
0745a5190c95a5ca80f7ff32e4db8e429dc2a03f |
|
20-Oct-2004 |
Timo Sirainen <tss@iki.fi> |
Logging changes.
--HG--
branch : HEAD |
b8cd2f2f99351605725b7260f5da89cff76d0a3a |
|
20-Oct-2004 |
Timo Sirainen <tss@iki.fi> |
Use USER/PASS instad for AUTH PLAIN. Also don't require "+OK" to have
parameters.
--HG--
branch : HEAD |
0c77590df05dc7ce340ea5f0d8d91534cea4f14e |
|
19-Oct-2004 |
Timo Sirainen <tss@iki.fi> |
crashfixes
--HG--
branch : HEAD |
f30577ff7cf29858f1878abe963b4f40a436434f |
|
19-Oct-2004 |
Timo Sirainen <tss@iki.fi> |
More smart IMAP and POP3 proxies. Now if remote login fails, it just
destroys the proxy and allows trying another username which can go elsewhere.
Also now replies with the same old "Authentication failed" error message
instead of showing remote server's failure message.
--HG--
branch : HEAD |
ba90e657bc68a72ab3b3021e2f4a874fac9965ba |
|
18-Oct-2004 |
Timo Sirainen <tss@iki.fi> |
Added IMAP and POP3 proxying support.
--HG--
branch : HEAD |