8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen#include "lib.h"

c3a636e4c9ae776e0eed06b6d7ad1ccfb6003afdTimo Sirainen#include "ioloop.h"

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen#include "array.h"

d6601a0bc4fd60e58bedbddf2481abd82cba76d7Timo Sirainen#include "base64.h"

fa2a11210f20fb8998ed656f75e163191c8047e6Timo Sirainen#include "hostpid.h"

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen#include "module-dir.h"

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen#include "restrict-access.h"

abf015c9682f0f723db87a7c97bc284ef814818fTimo Sirainen#include "eacces-error.h"

70afae43cc78ea6ecca83f6c587072c442a15ec1Timo Sirainen#include "ipwd.h"

fa2a11210f20fb8998ed656f75e163191c8047e6Timo Sirainen#include "str.h"

fa2a11210f20fb8998ed656f75e163191c8047e6Timo Sirainen#include "var-expand.h"

fa2a11210f20fb8998ed656f75e163191c8047e6Timo Sirainen#include "dict.h"

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen#include "settings-parser.h"

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen#include "auth-master.h"

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen#include "master-service-private.h"

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen#include "master-service-settings.h"

5d03d9f439e41c90215a3c938ffebe4c2a8ae257Timo Sirainen#include "master-service-settings-cache.h"

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen#include "mail-user.h"

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen#include "mail-namespace.h"

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen#include "mail-storage.h"

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen#include "mail-storage-service.h"

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen#include <sys/stat.h>

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen

542e28b384a6b26695f3e8de38fd5727d06f3333Timo Sirainen#ifdef HAVE_SYS_TIME_H

542e28b384a6b26695f3e8de38fd5727d06f3333Timo Sirainen# include <sys/time.h>

542e28b384a6b26695f3e8de38fd5727d06f3333Timo Sirainen#endif

542e28b384a6b26695f3e8de38fd5727d06f3333Timo Sirainen#ifdef HAVE_SYS_RESOURCE_H

542e28b384a6b26695f3e8de38fd5727d06f3333Timo Sirainen# include <sys/resource.h>

542e28b384a6b26695f3e8de38fd5727d06f3333Timo Sirainen#endif

542e28b384a6b26695f3e8de38fd5727d06f3333Timo Sirainen

c3a636e4c9ae776e0eed06b6d7ad1ccfb6003afdTimo Sirainen#define MAX_TIME_BACKWARDS_SLEEP 5

c3a636e4c9ae776e0eed06b6d7ad1ccfb6003afdTimo Sirainen#define MAX_NOWARN_FORWARD_SECS 10

c3a636e4c9ae776e0eed06b6d7ad1ccfb6003afdTimo Sirainen

3b22894b8805b186c73d8b754001e8d7e944be85Timo Sirainen#define ERRSTR_INVALID_USER_SETTINGS \

3b22894b8805b186c73d8b754001e8d7e944be85Timo Sirainen "Invalid user settings. Refer to server log for more information."

3b22894b8805b186c73d8b754001e8d7e944be85Timo Sirainen

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainenstruct mail_storage_service_privileges {

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen uid_t uid;

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen gid_t gid;

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen const char *uid_source, *gid_source;

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen const char *home;

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen const char *chroot;

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen};

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen

4da8c6cdefabd31262318c32da3c13de1d9ea953Timo Sirainenstruct mail_storage_service_ctx {

5d03d9f439e41c90215a3c938ffebe4c2a8ae257Timo Sirainen pool_t pool;

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen struct master_service *service;

1388b590dbd85245b591346f860bc1319953318aTimo Sirainen const char *default_log_prefix;

1388b590dbd85245b591346f860bc1319953318aTimo Sirainen

49621bf0ef1d55aaaa2dc7d76011cbfeabdcfbe1Timo Sirainen struct auth_master_connection *conn, *iter_conn;

fa2433aebcf3fccfa30ca9eed9b1a9166cf92ee2Timo Sirainen struct auth_master_user_list_ctx *auth_list;

4da8c6cdefabd31262318c32da3c13de1d9ea953Timo Sirainen const struct setting_parser_info **set_roots;

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen enum mail_storage_service_flags flags;

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen

5d03d9f439e41c90215a3c938ffebe4c2a8ae257Timo Sirainen const char *set_cache_module, *set_cache_service;

5d03d9f439e41c90215a3c938ffebe4c2a8ae257Timo Sirainen struct master_service_settings_cache *set_cache;

5d03d9f439e41c90215a3c938ffebe4c2a8ae257Timo Sirainen

3482fee0e3733456512ba110780824e6daa7ff9fTimo Sirainen pool_t userdb_next_pool;

3482fee0e3733456512ba110780824e6daa7ff9fTimo Sirainen const char *const **userdb_next_fieldsp;

3482fee0e3733456512ba110780824e6daa7ff9fTimo Sirainen

0dffa25d211be541ee3c953b23566a1a990789dfTimo Sirainen bool debug:1;

0dffa25d211be541ee3c953b23566a1a990789dfTimo Sirainen bool log_initialized:1;

0dffa25d211be541ee3c953b23566a1a990789dfTimo Sirainen bool config_permission_denied:1;

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen};

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen

4da8c6cdefabd31262318c32da3c13de1d9ea953Timo Sirainenstruct mail_storage_service_user {

367e28a16854ee9f7247b2518f36f5e9163fcc10Timo Sirainen pool_t pool;

d1bf4ae66b8bf3b9e28df1823d6d4adda2b923b6Timo Sirainen int refcount;

d1bf4ae66b8bf3b9e28df1823d6d4adda2b923b6Timo Sirainen

1388b590dbd85245b591346f860bc1319953318aTimo Sirainen struct mail_storage_service_ctx *service_ctx;

d1fff80640050631b06bfab904a34b2ad24601e8Timo Sirainen struct mail_storage_service_input input;

b9b841558c5f91db7f5fc71c0ac62aad1bbf6418Timo Sirainen enum mail_storage_service_flags flags;

d1fff80640050631b06bfab904a34b2ad24601e8Timo Sirainen

d2729522f8b4754b66be7e16548ede39b033fb04Timo Sirainen struct event *event;

d2729522f8b4754b66be7e16548ede39b033fb04Timo Sirainen ARRAY(struct event *) event_stack;

1388b590dbd85245b591346f860bc1319953318aTimo Sirainen struct ioloop_context *ioloop_ctx;

2f90189c6ee66a17f7bf838a8eb8a69868630fb8Timo Sirainen const char *log_prefix, *auth_token, *auth_user;

1388b590dbd85245b591346f860bc1319953318aTimo Sirainen

f3e17726502b6cf1912f30aae7e283b5d31ea69cTimo Sirainen const char *system_groups_user, *uid_source, *gid_source;

baf97389e203e105b97a8183b2893740691f8c63Timo Sirainen const char *chdir_path;

367e28a16854ee9f7247b2518f36f5e9163fcc10Timo Sirainen const struct mail_user_settings *user_set;

2fb9ae42f9e36388ec6db24188b9108434043fd0Timo Sirainen const struct setting_parser_info *user_info;

367e28a16854ee9f7247b2518f36f5e9163fcc10Timo Sirainen struct setting_parser_context *set_parser;

e438c85a6b0f77889e25913bbbba808d6078282dStephan Bosch

c977ee6ce06cbc0b4668fde1ec34f2f5e1773684Timo Sirainen unsigned int session_id_counter;

c977ee6ce06cbc0b4668fde1ec34f2f5e1773684Timo Sirainen

0dffa25d211be541ee3c953b23566a1a990789dfTimo Sirainen bool anonymous:1;

0dffa25d211be541ee3c953b23566a1a990789dfTimo Sirainen bool admin:1;

367e28a16854ee9f7247b2518f36f5e9163fcc10Timo Sirainen};

367e28a16854ee9f7247b2518f36f5e9163fcc10Timo Sirainen

38f227941bcf673e0e523c1ac7267bca9cbcd2c4Timo Sirainenstruct module *mail_storage_service_modules = NULL;

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen

0f5dc4da3982053036be65190e44bf28a67b1ca2Timo Sirainenstatic int

265cb53cf8d5cb35edd4c4ff086ca6165605b708Timo Sirainenmail_storage_service_var_expand(struct mail_storage_service_ctx *ctx,

265cb53cf8d5cb35edd4c4ff086ca6165605b708Timo Sirainen string_t *str, const char *format,

265cb53cf8d5cb35edd4c4ff086ca6165605b708Timo Sirainen struct mail_storage_service_user *user,

265cb53cf8d5cb35edd4c4ff086ca6165605b708Timo Sirainen const struct mail_storage_service_input *input,

0f5dc4da3982053036be65190e44bf28a67b1ca2Timo Sirainen const struct mail_storage_service_privileges *priv,

0f5dc4da3982053036be65190e44bf28a67b1ca2Timo Sirainen const char **error_r);

265cb53cf8d5cb35edd4c4ff086ca6165605b708Timo Sirainen

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainenstatic bool

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainenmail_user_set_get_mail_debug(const struct setting_parser_info *user_info,

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen const struct mail_user_settings *user_set)

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen{

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen const struct mail_storage_settings *mail_set;

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen mail_set = mail_user_set_get_driver_settings(user_info, user_set,

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen MAIL_STORAGE_SET_DRIVER_NAME);

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen return mail_set->mail_debug;

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen}

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainenstatic void set_keyval(struct mail_storage_service_ctx *ctx,

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen struct mail_storage_service_user *user,

2eb2cf8eeb763bd5ca9b6848dce32f0303e88ec1Timo Sirainen const char *key, const char *value)

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen{

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen struct setting_parser_context *set_parser = user->set_parser;

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen if (master_service_set_has_config_override(ctx->service, key)) {

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen /* this setting was already overridden with -o parameter */

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen if (mail_user_set_get_mail_debug(user->user_info,

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen user->user_set)) {

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen i_debug("Ignoring overridden (-o) userdb setting: %s",

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen key);

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen }

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen return;

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen }

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen

096e109f9f332bc758ca5e22ec64337379c5f231Timo Sirainen if (settings_parse_keyvalue(set_parser, key, value) < 0) {

096e109f9f332bc758ca5e22ec64337379c5f231Timo Sirainen i_fatal("Invalid userdb input %s=%s: %s", key, value,

367e28a16854ee9f7247b2518f36f5e9163fcc10Timo Sirainen settings_parser_get_error(set_parser));

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen }

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen}

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainenstatic int set_line(struct mail_storage_service_ctx *ctx,

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen struct mail_storage_service_user *user,

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen const char *line)

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen{

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen struct setting_parser_context *set_parser = user->set_parser;

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen bool mail_debug;

1f5597beba229acd914e30a6da3c0e62d83b6e8fTimo Sirainen const char *key, *orig_key, *append_value = NULL;

2ac5f36aa7c2e7a07ba8815d43a6d7483f62e74cTimo Sirainen size_t len;

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen int ret;

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen mail_debug = mail_user_set_get_mail_debug(user->user_info,

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen user->user_set);

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen if (strchr(line, '=') == NULL)

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen line = t_strconcat(line, "=yes", NULL);

47569a4b2b4d3cc55e786177798c922c3c44233dTimo Sirainen orig_key = key = t_strcut(line, '=');

47569a4b2b4d3cc55e786177798c922c3c44233dTimo Sirainen

7af5f78e9fee296e42430d94ef252ff0333d8024Timo Sirainen len = strlen(key);

7af5f78e9fee296e42430d94ef252ff0333d8024Timo Sirainen if (len > 0 && key[len-1] == '+') {

7af5f78e9fee296e42430d94ef252ff0333d8024Timo Sirainen /* key+=value */

7af5f78e9fee296e42430d94ef252ff0333d8024Timo Sirainen append_value = line + len + 1;

7af5f78e9fee296e42430d94ef252ff0333d8024Timo Sirainen key = t_strndup(key, len-1);

47569a4b2b4d3cc55e786177798c922c3c44233dTimo Sirainen }

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen if (!settings_parse_is_valid_key(set_parser, key)) {

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen /* assume it's a plugin setting */

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen key = t_strconcat("plugin/", key, NULL);

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen line = t_strconcat("plugin/", line, NULL);

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen }

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen if (master_service_set_has_config_override(ctx->service, key)) {

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen /* this setting was already overridden with -o parameter */

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen if (mail_debug) {

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen i_debug("Ignoring overridden (-o) userdb setting: %s",

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen key);

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen }

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen return 1;

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen }

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen

1f5597beba229acd914e30a6da3c0e62d83b6e8fTimo Sirainen if (append_value != NULL) {

47569a4b2b4d3cc55e786177798c922c3c44233dTimo Sirainen const void *value;

47569a4b2b4d3cc55e786177798c922c3c44233dTimo Sirainen enum setting_type type;

47569a4b2b4d3cc55e786177798c922c3c44233dTimo Sirainen

47569a4b2b4d3cc55e786177798c922c3c44233dTimo Sirainen value = settings_parse_get_value(set_parser, key, &type);

79fff45046397ba48c8693d5f37a1fd93096987fTimo Sirainen if (value != NULL && type == SET_STR) {

1f5597beba229acd914e30a6da3c0e62d83b6e8fTimo Sirainen const char *const *strp = value;

1f5597beba229acd914e30a6da3c0e62d83b6e8fTimo Sirainen

1f5597beba229acd914e30a6da3c0e62d83b6e8fTimo Sirainen line = t_strdup_printf("%s=%s%s",

1f5597beba229acd914e30a6da3c0e62d83b6e8fTimo Sirainen key, *strp, append_value);

1f5597beba229acd914e30a6da3c0e62d83b6e8fTimo Sirainen } else {

47569a4b2b4d3cc55e786177798c922c3c44233dTimo Sirainen i_error("Ignoring %s userdb setting. "

47569a4b2b4d3cc55e786177798c922c3c44233dTimo Sirainen "'+' can only be used for strings.", orig_key);

47569a4b2b4d3cc55e786177798c922c3c44233dTimo Sirainen }

47569a4b2b4d3cc55e786177798c922c3c44233dTimo Sirainen }

47569a4b2b4d3cc55e786177798c922c3c44233dTimo Sirainen

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen ret = settings_parse_line(set_parser, line);

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen if (mail_debug && ret >= 0) {

417642ddac19708bea6dd2c2bbeaf6a9578d521bTimo Sirainen if (strstr(key, "pass") != NULL) {

417642ddac19708bea6dd2c2bbeaf6a9578d521bTimo Sirainen /* possibly a password field (e.g. imapc_password).

417642ddac19708bea6dd2c2bbeaf6a9578d521bTimo Sirainen line = t_strconcat(key, "=<hidden>", NULL);

417642ddac19708bea6dd2c2bbeaf6a9578d521bTimo Sirainen }

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen i_debug(ret == 0 ?

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen "Unknown userdb setting: %s" :

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen "Added userdb setting: %s", line);

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen }

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen return ret;

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen}

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainenstatic bool validate_chroot(const struct mail_user_settings *user_set,

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen const char *dir)

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen{

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen const char *const *chroot_dirs;

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen if (*dir == '\0')

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen return FALSE;

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen if (*user_set->valid_chroot_dirs == '\0')

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen return FALSE;

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen chroot_dirs = t_strsplit(user_set->valid_chroot_dirs, ":");

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen while (*chroot_dirs != NULL) {

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen if (**chroot_dirs != '\0' &&

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen strncmp(dir, *chroot_dirs, strlen(*chroot_dirs)) == 0)

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen return TRUE;

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen chroot_dirs++;

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen }

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen return FALSE;

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen}

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainenstatic int

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainenuser_reply_handle(struct mail_storage_service_ctx *ctx,

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen struct mail_storage_service_user *user,

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen const struct auth_user_reply *reply,

4da8c6cdefabd31262318c32da3c13de1d9ea953Timo Sirainen const char **error_r)

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen{

002179a890bf4f1942cad6463787719eaa9fd6c0Timo Sirainen const char *home = reply->home;

002179a890bf4f1942cad6463787719eaa9fd6c0Timo Sirainen const char *chroot = reply->chroot;

002179a890bf4f1942cad6463787719eaa9fd6c0Timo Sirainen const char *const *str, *line, *p;

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen unsigned int i, count;

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen int ret = 0;

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen if (reply->uid != (uid_t)-1) {

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen if (reply->uid == 0) {

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen *error_r = "userdb returned 0 as uid";

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen return -1;

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen }

f3e17726502b6cf1912f30aae7e283b5d31ea69cTimo Sirainen user->uid_source = "userdb lookup";

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen set_keyval(ctx, user, "mail_uid", dec2str(reply->uid));

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen }

f3e17726502b6cf1912f30aae7e283b5d31ea69cTimo Sirainen if (reply->gid != (uid_t)-1) {

f3e17726502b6cf1912f30aae7e283b5d31ea69cTimo Sirainen user->gid_source = "userdb lookup";

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen set_keyval(ctx, user, "mail_gid", dec2str(reply->gid));

f3e17726502b6cf1912f30aae7e283b5d31ea69cTimo Sirainen }

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen

002179a890bf4f1942cad6463787719eaa9fd6c0Timo Sirainen if (home != NULL && chroot == NULL &&

002179a890bf4f1942cad6463787719eaa9fd6c0Timo Sirainen *user->user_set->valid_chroot_dirs != '\0' &&

002179a890bf4f1942cad6463787719eaa9fd6c0Timo Sirainen (p = strstr(home, "/./")) != NULL) {

002179a890bf4f1942cad6463787719eaa9fd6c0Timo Sirainen /* wu-ftpd like <chroot>/./<home> - check only if there's even

002179a890bf4f1942cad6463787719eaa9fd6c0Timo Sirainen chroot = t_strdup_until(home, p);

002179a890bf4f1942cad6463787719eaa9fd6c0Timo Sirainen home = p + 2;

002179a890bf4f1942cad6463787719eaa9fd6c0Timo Sirainen }

002179a890bf4f1942cad6463787719eaa9fd6c0Timo Sirainen

002179a890bf4f1942cad6463787719eaa9fd6c0Timo Sirainen if (home != NULL)

e30b9e07f9657c35ca09ac36d57d60cbe2ebbc66Timo Sirainen set_keyval(ctx, user, "mail_home", home);

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen

002179a890bf4f1942cad6463787719eaa9fd6c0Timo Sirainen if (chroot != NULL) {

002179a890bf4f1942cad6463787719eaa9fd6c0Timo Sirainen if (!validate_chroot(user->user_set, chroot)) {

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen *error_r = t_strdup_printf(

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen "userdb returned invalid chroot directory: %s "

002179a890bf4f1942cad6463787719eaa9fd6c0Timo Sirainen "(see valid_chroot_dirs setting)", chroot);

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen return -1;

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen }

002179a890bf4f1942cad6463787719eaa9fd6c0Timo Sirainen set_keyval(ctx, user, "mail_chroot", chroot);

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen }

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen

e438c85a6b0f77889e25913bbbba808d6078282dStephan Bosch user->anonymous = reply->anonymous;

e438c85a6b0f77889e25913bbbba808d6078282dStephan Bosch

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen str = array_get(&reply->extra_fields, &count);

4c261fb48e6e36570a0841aa51ca483024d6a0a6Timo Sirainen for (i = 0; i < count; i++) {

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen line = str[i];

4da8c6cdefabd31262318c32da3c13de1d9ea953Timo Sirainen if (strncmp(line, "system_groups_user=", 19) == 0) {

4da8c6cdefabd31262318c32da3c13de1d9ea953Timo Sirainen user->system_groups_user =

4da8c6cdefabd31262318c32da3c13de1d9ea953Timo Sirainen p_strdup(user->pool, line + 19);

baf97389e203e105b97a8183b2893740691f8c63Timo Sirainen } else if (strncmp(line, "chdir=", 6) == 0) {

baf97389e203e105b97a8183b2893740691f8c63Timo Sirainen user->chdir_path = p_strdup(user->pool, line+6);

542e28b384a6b26695f3e8de38fd5727d06f3333Timo Sirainen } else if (strncmp(line, "nice=", 5) == 0) {

542e28b384a6b26695f3e8de38fd5727d06f3333Timo Sirainen#ifdef HAVE_SETPRIORITY

c93aca832ee532010ead91b85fa9f614132e1be2Stephan Bosch int n;

c93aca832ee532010ead91b85fa9f614132e1be2Stephan Bosch if (str_to_int(line + 5, &n) < 0) {

c93aca832ee532010ead91b85fa9f614132e1be2Stephan Bosch i_error("userdb returned invalid nice value %s",

c93aca832ee532010ead91b85fa9f614132e1be2Stephan Bosch line + 5);

c93aca832ee532010ead91b85fa9f614132e1be2Stephan Bosch } else if (n != 0) {

542e28b384a6b26695f3e8de38fd5727d06f3333Timo Sirainen if (setpriority(PRIO_PROCESS, 0, n) < 0)

542e28b384a6b26695f3e8de38fd5727d06f3333Timo Sirainen i_error("setpriority(%d) failed: %m", n);

542e28b384a6b26695f3e8de38fd5727d06f3333Timo Sirainen }

542e28b384a6b26695f3e8de38fd5727d06f3333Timo Sirainen#endif

ab90f702ceedb7ba445a9a592be0b213b27cbafaStephan Bosch } else if (strncmp(line, "auth_token=", 11) == 0) {

ab90f702ceedb7ba445a9a592be0b213b27cbafaStephan Bosch user->auth_token = p_strdup(user->pool, line+11);

2f90189c6ee66a17f7bf838a8eb8a69868630fb8Timo Sirainen } else if (strncmp(line, "auth_user=", 10) == 0) {

2f90189c6ee66a17f7bf838a8eb8a69868630fb8Timo Sirainen user->auth_user = p_strdup(user->pool, line+10);

5a9912dcadfd467c5ea54bdc3331eef359f0b1c5Timo Sirainen } else if (strncmp(line, "admin=", 6) == 0) {

5a9912dcadfd467c5ea54bdc3331eef359f0b1c5Timo Sirainen user->admin = line[6] == 'y' || line[6] == 'Y' ||

5a9912dcadfd467c5ea54bdc3331eef359f0b1c5Timo Sirainen line[6] == '1';

4da8c6cdefabd31262318c32da3c13de1d9ea953Timo Sirainen } else T_BEGIN {

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen ret = set_line(ctx, user, line);

18c209a06941ef583b08b173dadfbe4571995bf9Timo Sirainen } T_END;

4c261fb48e6e36570a0841aa51ca483024d6a0a6Timo Sirainen if (ret < 0)

4c261fb48e6e36570a0841aa51ca483024d6a0a6Timo Sirainen break;

18c209a06941ef583b08b173dadfbe4571995bf9Timo Sirainen }

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen if (ret < 0) {

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen *error_r = t_strdup_printf("Invalid userdb input '%s': %s",

c07d7eb3ca9754367697c98f5e66a3982a45d142Timo Sirainen str[i], settings_parser_get_error(user->set_parser));

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen }

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen return ret;

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen}

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainenstatic int

4da8c6cdefabd31262318c32da3c13de1d9ea953Timo Sirainenservice_auth_userdb_lookup(struct mail_storage_service_ctx *ctx,

fc464e5b2b2ab4d415a5d5b90ce4475d34620a75Timo Sirainen const struct mail_storage_service_input *input,

cf0ad1a0bddb0787f3d7b408a96d721a8b2a98a3Timo Sirainen pool_t pool, const char **user,

cf0ad1a0bddb0787f3d7b408a96d721a8b2a98a3Timo Sirainen const char *const **fields_r,

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen const char **error_r)

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen{

fc464e5b2b2ab4d415a5d5b90ce4475d34620a75Timo Sirainen struct auth_user_info info;

cf0ad1a0bddb0787f3d7b408a96d721a8b2a98a3Timo Sirainen const char *new_username;

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen int ret;

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen

efe78d3ba24fc866af1c79b9223dc0809ba26cadStephan Bosch i_zero(&info);

b9dc21a94401638c00e40b695998875e1563ce77Timo Sirainen info.service = input->service != NULL ? input->service :

b9dc21a94401638c00e40b695998875e1563ce77Timo Sirainen ctx->service->name;

fc464e5b2b2ab4d415a5d5b90ce4475d34620a75Timo Sirainen info.local_ip = input->local_ip;

fc464e5b2b2ab4d415a5d5b90ce4475d34620a75Timo Sirainen info.remote_ip = input->remote_ip;

27ca6cb0548c6478005c77d04be641356ec7d83cTimo Sirainen info.local_port = input->local_port;

27ca6cb0548c6478005c77d04be641356ec7d83cTimo Sirainen info.remote_port = input->remote_port;

11120acd01d43973cd504952d691a2ae1c546ee2Timo Sirainen info.debug = input->debug;

fc464e5b2b2ab4d415a5d5b90ce4475d34620a75Timo Sirainen

4da8c6cdefabd31262318c32da3c13de1d9ea953Timo Sirainen ret = auth_master_user_lookup(ctx->conn, *user, &info, pool,

cf0ad1a0bddb0787f3d7b408a96d721a8b2a98a3Timo Sirainen &new_username, fields_r);

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen if (ret > 0) {

cf0ad1a0bddb0787f3d7b408a96d721a8b2a98a3Timo Sirainen if (strcmp(*user, new_username) != 0) {

4da8c6cdefabd31262318c32da3c13de1d9ea953Timo Sirainen if (ctx->debug)

cf0ad1a0bddb0787f3d7b408a96d721a8b2a98a3Timo Sirainen i_debug("changed username to %s", new_username);

cf0ad1a0bddb0787f3d7b408a96d721a8b2a98a3Timo Sirainen *user = t_strdup(new_username);

cf0ad1a0bddb0787f3d7b408a96d721a8b2a98a3Timo Sirainen }

cf0ad1a0bddb0787f3d7b408a96d721a8b2a98a3Timo Sirainen *user = new_username;

cf0ad1a0bddb0787f3d7b408a96d721a8b2a98a3Timo Sirainen } else if (ret == 0)

3b22894b8805b186c73d8b754001e8d7e944be85Timo Sirainen *error_r = "Unknown user";

3b22894b8805b186c73d8b754001e8d7e944be85Timo Sirainen else if (**fields_r != NULL) {

3b22894b8805b186c73d8b754001e8d7e944be85Timo Sirainen *error_r = t_strdup(**fields_r);

3b22894b8805b186c73d8b754001e8d7e944be85Timo Sirainen ret = -2;

3b22894b8805b186c73d8b754001e8d7e944be85Timo Sirainen } else {

3b22894b8805b186c73d8b754001e8d7e944be85Timo Sirainen *error_r = MAIL_ERRSTR_CRITICAL_MSG;

3b22894b8805b186c73d8b754001e8d7e944be85Timo Sirainen }

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen return ret;

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen}

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen

70afae43cc78ea6ecca83f6c587072c442a15ec1Timo Sirainenstatic bool parse_uid(const char *str, uid_t *uid_r, const char **error_r)

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen{

70afae43cc78ea6ecca83f6c587072c442a15ec1Timo Sirainen struct passwd pw;

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen

9261dbf0675204898c6557591c7aa376e23a52b2Timo Sirainen if (str_to_uid(str, uid_r) == 0)

9261dbf0675204898c6557591c7aa376e23a52b2Timo Sirainen return TRUE;

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen

70afae43cc78ea6ecca83f6c587072c442a15ec1Timo Sirainen switch (i_getpwnam(str, &pw)) {

70afae43cc78ea6ecca83f6c587072c442a15ec1Timo Sirainen case -1:

70afae43cc78ea6ecca83f6c587072c442a15ec1Timo Sirainen *error_r = t_strdup_printf("getpwnam(%s) failed: %m", str);

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen return FALSE;

70afae43cc78ea6ecca83f6c587072c442a15ec1Timo Sirainen case 0:

70afae43cc78ea6ecca83f6c587072c442a15ec1Timo Sirainen *error_r = t_strconcat("Unknown UNIX UID user: ", str, NULL);

70afae43cc78ea6ecca83f6c587072c442a15ec1Timo Sirainen return FALSE;

70afae43cc78ea6ecca83f6c587072c442a15ec1Timo Sirainen default:

70afae43cc78ea6ecca83f6c587072c442a15ec1Timo Sirainen *uid_r = pw.pw_uid;

70afae43cc78ea6ecca83f6c587072c442a15ec1Timo Sirainen return TRUE;

70afae43cc78ea6ecca83f6c587072c442a15ec1Timo Sirainen }

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen}

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen

70afae43cc78ea6ecca83f6c587072c442a15ec1Timo Sirainenstatic bool parse_gid(const char *str, gid_t *gid_r, const char **error_r)

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen{

70afae43cc78ea6ecca83f6c587072c442a15ec1Timo Sirainen struct group gr;

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen

9261dbf0675204898c6557591c7aa376e23a52b2Timo Sirainen if (str_to_gid(str, gid_r) == 0)

9261dbf0675204898c6557591c7aa376e23a52b2Timo Sirainen return TRUE;

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen

70afae43cc78ea6ecca83f6c587072c442a15ec1Timo Sirainen switch (i_getgrnam(str, &gr)) {

70afae43cc78ea6ecca83f6c587072c442a15ec1Timo Sirainen case -1:

70afae43cc78ea6ecca83f6c587072c442a15ec1Timo Sirainen *error_r = t_strdup_printf("getgrnam(%s) failed: %m", str);

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen return FALSE;

70afae43cc78ea6ecca83f6c587072c442a15ec1Timo Sirainen case 0:

70afae43cc78ea6ecca83f6c587072c442a15ec1Timo Sirainen *error_r = t_strconcat("Unknown UNIX GID group: ", str, NULL);

70afae43cc78ea6ecca83f6c587072c442a15ec1Timo Sirainen return FALSE;

70afae43cc78ea6ecca83f6c587072c442a15ec1Timo Sirainen default:

70afae43cc78ea6ecca83f6c587072c442a15ec1Timo Sirainen *gid_r = gr.gr_gid;

70afae43cc78ea6ecca83f6c587072c442a15ec1Timo Sirainen return TRUE;

70afae43cc78ea6ecca83f6c587072c442a15ec1Timo Sirainen }

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen}

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainenstatic const struct var_expand_table *

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainenget_var_expand_table(struct master_service *service,

2f90189c6ee66a17f7bf838a8eb8a69868630fb8Timo Sirainen struct mail_storage_service_user *user,

39f5c2b2143842ff6f827b7198cae8853b8c5bbaTimo Sirainen const struct mail_storage_service_input *input,

39f5c2b2143842ff6f827b7198cae8853b8c5bbaTimo Sirainen const struct mail_storage_service_privileges *priv)

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen{

acfda38b75d0f0e899ef692fef01593bd56ed85eTimo Sirainen const char *username = t_strcut(input->username, '@');

acfda38b75d0f0e899ef692fef01593bd56ed85eTimo Sirainen const char *domain = i_strchr_to_next(input->username, '@');

acfda38b75d0f0e899ef692fef01593bd56ed85eTimo Sirainen const char *uid = priv == NULL ? NULL :

39f5c2b2143842ff6f827b7198cae8853b8c5bbaTimo Sirainen dec2str(priv->uid == (uid_t)-1 ? geteuid() : priv->uid);

acfda38b75d0f0e899ef692fef01593bd56ed85eTimo Sirainen const char *gid = priv == NULL ? NULL :

39f5c2b2143842ff6f827b7198cae8853b8c5bbaTimo Sirainen dec2str(priv->gid == (gid_t)-1 ? getegid() : priv->gid);

acfda38b75d0f0e899ef692fef01593bd56ed85eTimo Sirainen

acfda38b75d0f0e899ef692fef01593bd56ed85eTimo Sirainen const char *auth_user, *auth_username, *auth_domain;

2f90189c6ee66a17f7bf838a8eb8a69868630fb8Timo Sirainen if (user == NULL || user->auth_user == NULL) {

acfda38b75d0f0e899ef692fef01593bd56ed85eTimo Sirainen auth_user = input->username;

acfda38b75d0f0e899ef692fef01593bd56ed85eTimo Sirainen auth_username = username;

acfda38b75d0f0e899ef692fef01593bd56ed85eTimo Sirainen auth_domain = domain;

2f90189c6ee66a17f7bf838a8eb8a69868630fb8Timo Sirainen } else {

acfda38b75d0f0e899ef692fef01593bd56ed85eTimo Sirainen auth_user = user->auth_user;

acfda38b75d0f0e899ef692fef01593bd56ed85eTimo Sirainen auth_username = t_strcut(user->auth_user, '@');

acfda38b75d0f0e899ef692fef01593bd56ed85eTimo Sirainen auth_domain = i_strchr_to_next(user->auth_user, '@');

2f90189c6ee66a17f7bf838a8eb8a69868630fb8Timo Sirainen }

acfda38b75d0f0e899ef692fef01593bd56ed85eTimo Sirainen

acfda38b75d0f0e899ef692fef01593bd56ed85eTimo Sirainen const struct var_expand_table stack_tab[] = {

acfda38b75d0f0e899ef692fef01593bd56ed85eTimo Sirainen { 'u', input->username, "user" },

acfda38b75d0f0e899ef692fef01593bd56ed85eTimo Sirainen { 'n', username, "username" },

acfda38b75d0f0e899ef692fef01593bd56ed85eTimo Sirainen { 'd', domain, "domain" },

acfda38b75d0f0e899ef692fef01593bd56ed85eTimo Sirainen { 's', service->name, "service" },

acfda38b75d0f0e899ef692fef01593bd56ed85eTimo Sirainen { 'l', net_ip2addr(&input->local_ip), "lip" },

acfda38b75d0f0e899ef692fef01593bd56ed85eTimo Sirainen { 'r', net_ip2addr(&input->remote_ip), "rip" },

acfda38b75d0f0e899ef692fef01593bd56ed85eTimo Sirainen { 'p', my_pid, "pid" },

acfda38b75d0f0e899ef692fef01593bd56ed85eTimo Sirainen { 'i', uid, "uid" },

acfda38b75d0f0e899ef692fef01593bd56ed85eTimo Sirainen { '\0', gid, "gid" },

acfda38b75d0f0e899ef692fef01593bd56ed85eTimo Sirainen { '\0', input->session_id, "session" },

acfda38b75d0f0e899ef692fef01593bd56ed85eTimo Sirainen { '\0', auth_user, "auth_user" },

acfda38b75d0f0e899ef692fef01593bd56ed85eTimo Sirainen { '\0', auth_username, "auth_username" },

acfda38b75d0f0e899ef692fef01593bd56ed85eTimo Sirainen { '\0', auth_domain, "auth_domain" },

acfda38b75d0f0e899ef692fef01593bd56ed85eTimo Sirainen { '\0', NULL, NULL }

acfda38b75d0f0e899ef692fef01593bd56ed85eTimo Sirainen };

acfda38b75d0f0e899ef692fef01593bd56ed85eTimo Sirainen struct var_expand_table *tab;

acfda38b75d0f0e899ef692fef01593bd56ed85eTimo Sirainen

acfda38b75d0f0e899ef692fef01593bd56ed85eTimo Sirainen tab = t_malloc_no0(sizeof(stack_tab));

acfda38b75d0f0e899ef692fef01593bd56ed85eTimo Sirainen memcpy(tab, stack_tab, sizeof(stack_tab));

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen return tab;

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen}

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen

19cadcc25c26af7afea1355d78e20ad64eaad263Timo Sirainenconst struct var_expand_table *

19cadcc25c26af7afea1355d78e20ad64eaad263Timo Sirainenmail_storage_service_get_var_expand_table(struct mail_storage_service_ctx *ctx,

19cadcc25c26af7afea1355d78e20ad64eaad263Timo Sirainen struct mail_storage_service_input *input)

19cadcc25c26af7afea1355d78e20ad64eaad263Timo Sirainen{

19cadcc25c26af7afea1355d78e20ad64eaad263Timo Sirainen struct mail_storage_service_privileges priv;

19cadcc25c26af7afea1355d78e20ad64eaad263Timo Sirainen

efe78d3ba24fc866af1c79b9223dc0809ba26cadStephan Bosch i_zero(&priv);

19cadcc25c26af7afea1355d78e20ad64eaad263Timo Sirainen priv.uid = (uid_t)-1;

19cadcc25c26af7afea1355d78e20ad64eaad263Timo Sirainen priv.gid = (gid_t)-1;

2f90189c6ee66a17f7bf838a8eb8a69868630fb8Timo Sirainen return get_var_expand_table(ctx->service, NULL, input, &priv);

19cadcc25c26af7afea1355d78e20ad64eaad263Timo Sirainen}

19cadcc25c26af7afea1355d78e20ad64eaad263Timo Sirainen

0f5dc4da3982053036be65190e44bf28a67b1ca2Timo Sirainenstatic bool

265cb53cf8d5cb35edd4c4ff086ca6165605b708Timo Sirainenuser_expand_varstr(struct mail_storage_service_ctx *ctx,

2f90189c6ee66a17f7bf838a8eb8a69868630fb8Timo Sirainen struct mail_storage_service_user *user,

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen struct mail_storage_service_privileges *priv,

0f5dc4da3982053036be65190e44bf28a67b1ca2Timo Sirainen const char *str, const char **value_r, const char **error_r)

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen{

0f5dc4da3982053036be65190e44bf28a67b1ca2Timo Sirainen string_t *value;

0f5dc4da3982053036be65190e44bf28a67b1ca2Timo Sirainen int ret;

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen

0f5dc4da3982053036be65190e44bf28a67b1ca2Timo Sirainen if (*str == SETTING_STRVAR_EXPANDED[0]) {

0f5dc4da3982053036be65190e44bf28a67b1ca2Timo Sirainen *value_r = str + 1;

c73ede1a6685975eb21eecf2fb5af79854867f9bTimo Sirainen return TRUE;

0f5dc4da3982053036be65190e44bf28a67b1ca2Timo Sirainen }

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen i_assert(*str == SETTING_STRVAR_UNEXPANDED[0]);

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen

0f5dc4da3982053036be65190e44bf28a67b1ca2Timo Sirainen value = t_str_new(256);

0f5dc4da3982053036be65190e44bf28a67b1ca2Timo Sirainen ret = mail_storage_service_var_expand(ctx, value, str + 1, user,

0f5dc4da3982053036be65190e44bf28a67b1ca2Timo Sirainen &user->input, priv, error_r);

0f5dc4da3982053036be65190e44bf28a67b1ca2Timo Sirainen *value_r = str_c(value);

0f5dc4da3982053036be65190e44bf28a67b1ca2Timo Sirainen return ret > 0;

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen}

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen

c06d6ea0766d0520af1a93e6000c0e73f350e0a2Timo Sirainenstatic int

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainenservice_parse_privileges(struct mail_storage_service_ctx *ctx,

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen struct mail_storage_service_user *user,

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen struct mail_storage_service_privileges *priv_r,

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen const char **error_r)

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen{

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen const struct mail_user_settings *set = user->user_set;

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen uid_t uid = (uid_t)-1;

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen gid_t gid = (gid_t)-1;

0f5dc4da3982053036be65190e44bf28a67b1ca2Timo Sirainen const char *error;

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen

efe78d3ba24fc866af1c79b9223dc0809ba26cadStephan Bosch i_zero(priv_r);

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen if (*set->mail_uid != '\0') {

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen if (!parse_uid(set->mail_uid, &uid, error_r)) {

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen *error_r = t_strdup_printf("%s (from %s)", *error_r,

70afae43cc78ea6ecca83f6c587072c442a15ec1Timo Sirainen user->uid_source);

c06d6ea0766d0520af1a93e6000c0e73f350e0a2Timo Sirainen return -1;

c06d6ea0766d0520af1a93e6000c0e73f350e0a2Timo Sirainen }

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen if (uid < (uid_t)set->first_valid_uid ||

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen (set->last_valid_uid != 0 &&

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen uid > (uid_t)set->last_valid_uid)) {

c06d6ea0766d0520af1a93e6000c0e73f350e0a2Timo Sirainen *error_r = t_strdup_printf(

216cd45a5f47c9bd46fe67c1b3bd6b1a42f6e39cTimo Sirainen "Mail access for users with UID %s not permitted "

216cd45a5f47c9bd46fe67c1b3bd6b1a42f6e39cTimo Sirainen "(see first_valid_uid in config file, uid from %s).",

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen dec2str(uid), user->uid_source);

c06d6ea0766d0520af1a93e6000c0e73f350e0a2Timo Sirainen return -1;

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen }

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen }

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen priv_r->uid = uid;

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen priv_r->uid_source = user->uid_source;

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen if (*set->mail_gid != '\0') {

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen if (!parse_gid(set->mail_gid, &gid, error_r)) {

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen *error_r = t_strdup_printf("%s (from %s)", *error_r,

70afae43cc78ea6ecca83f6c587072c442a15ec1Timo Sirainen user->gid_source);

c06d6ea0766d0520af1a93e6000c0e73f350e0a2Timo Sirainen return -1;

c06d6ea0766d0520af1a93e6000c0e73f350e0a2Timo Sirainen }

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen if (gid < (gid_t)set->first_valid_gid ||

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen (set->last_valid_gid != 0 &&

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen gid > (gid_t)set->last_valid_gid)) {

c06d6ea0766d0520af1a93e6000c0e73f350e0a2Timo Sirainen *error_r = t_strdup_printf(

216cd45a5f47c9bd46fe67c1b3bd6b1a42f6e39cTimo Sirainen "Mail access for users with GID %s not permitted "

216cd45a5f47c9bd46fe67c1b3bd6b1a42f6e39cTimo Sirainen "(see first_valid_gid in config file, gid from %s).",

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen dec2str(gid), user->gid_source);

c06d6ea0766d0520af1a93e6000c0e73f350e0a2Timo Sirainen return -1;

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen }

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen }

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen priv_r->gid = gid;

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen priv_r->gid_source = user->gid_source;

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen /* variable strings are expanded in mail_user_init(),

0f5dc4da3982053036be65190e44bf28a67b1ca2Timo Sirainen if (!user_expand_varstr(ctx, user, priv_r, user->user_set->mail_home,

c73ede1a6685975eb21eecf2fb5af79854867f9bTimo Sirainen &priv_r->home, &error)) {

0f5dc4da3982053036be65190e44bf28a67b1ca2Timo Sirainen *error_r = t_strdup_printf(

0f5dc4da3982053036be65190e44bf28a67b1ca2Timo Sirainen "Failed to expand mail_home '%s': %s",

0f5dc4da3982053036be65190e44bf28a67b1ca2Timo Sirainen user->user_set->mail_home, error);

0f5dc4da3982053036be65190e44bf28a67b1ca2Timo Sirainen return -1;

0f5dc4da3982053036be65190e44bf28a67b1ca2Timo Sirainen }

0f5dc4da3982053036be65190e44bf28a67b1ca2Timo Sirainen if (!user_expand_varstr(ctx, user, priv_r, user->user_set->mail_chroot,

0f5dc4da3982053036be65190e44bf28a67b1ca2Timo Sirainen &priv_r->chroot, &error)) {

0f5dc4da3982053036be65190e44bf28a67b1ca2Timo Sirainen *error_r = t_strdup_printf(

0f5dc4da3982053036be65190e44bf28a67b1ca2Timo Sirainen "Failed to expand mail_chroot '%s': %s",

0f5dc4da3982053036be65190e44bf28a67b1ca2Timo Sirainen user->user_set->mail_chroot, error);

0f5dc4da3982053036be65190e44bf28a67b1ca2Timo Sirainen return -1;

0f5dc4da3982053036be65190e44bf28a67b1ca2Timo Sirainen }

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen return 0;

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen}

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen

20dca965f48c1d7600a268d380c0b5fb5f1011d5Timo Sirainenstatic void mail_storage_service_seteuid_root(void)

20dca965f48c1d7600a268d380c0b5fb5f1011d5Timo Sirainen{

20dca965f48c1d7600a268d380c0b5fb5f1011d5Timo Sirainen if (seteuid(0) < 0) {

20dca965f48c1d7600a268d380c0b5fb5f1011d5Timo Sirainen i_fatal("mail-storage-service: "

20dca965f48c1d7600a268d380c0b5fb5f1011d5Timo Sirainen "Failed to restore temporarily dropped root privileges: "

20dca965f48c1d7600a268d380c0b5fb5f1011d5Timo Sirainen "seteuid(0) failed: %m");

20dca965f48c1d7600a268d380c0b5fb5f1011d5Timo Sirainen }

20dca965f48c1d7600a268d380c0b5fb5f1011d5Timo Sirainen}

20dca965f48c1d7600a268d380c0b5fb5f1011d5Timo Sirainen

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainenstatic int

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainenservice_drop_privileges(struct mail_storage_service_user *user,

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen struct mail_storage_service_privileges *priv,

57316ab705807ac3a433e2ec9b8b6ff5d090c3d7Martti Rannanjärvi bool allow_root, bool keep_setuid_root,

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen bool setenv_only, const char **error_r)

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen{

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen const struct mail_user_settings *set = user->user_set;

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen struct restrict_access_settings rset;

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen uid_t current_euid, setuid_uid = 0;

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen const char *cur_chroot, *error;

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen current_euid = geteuid();

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen restrict_access_init(&rset);

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen restrict_access_get_env(&rset);

de0034cc6bb52585bc82289801435418a7ee7298Martti Rannanjärvi rset.allow_setuid_root = keep_setuid_root;

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen if (priv->uid != (uid_t)-1) {

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen rset.uid = priv->uid;

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen rset.uid_source = priv->uid_source;

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen } else if (rset.uid == (uid_t)-1 &&

57316ab705807ac3a433e2ec9b8b6ff5d090c3d7Martti Rannanjärvi !allow_root && current_euid == 0) {

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen *error_r = "User is missing UID (see mail_uid setting)";

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen return -1;

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen }

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen if (priv->gid != (gid_t)-1) {

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen rset.gid = priv->gid;

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen rset.gid_source = priv->gid_source;

57316ab705807ac3a433e2ec9b8b6ff5d090c3d7Martti Rannanjärvi } else if (rset.gid == (gid_t)-1 && !allow_root &&

7f472e15b5f19a3536634863950c80a88079da23Timo Sirainen set->first_valid_gid > 0 && getegid() == 0) {

0139fcb57a88f6ed27a1bb4a1bd537b04fd2b5d6Timo Sirainen *error_r = "User is missing GID (see mail_gid setting)";

0139fcb57a88f6ed27a1bb4a1bd537b04fd2b5d6Timo Sirainen return -1;

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen }

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen if (*set->mail_privileged_group != '\0') {

70afae43cc78ea6ecca83f6c587072c442a15ec1Timo Sirainen if (!parse_gid(set->mail_privileged_group, &rset.privileged_gid,

70afae43cc78ea6ecca83f6c587072c442a15ec1Timo Sirainen &error)) {

c06d6ea0766d0520af1a93e6000c0e73f350e0a2Timo Sirainen *error_r = t_strdup_printf(

70afae43cc78ea6ecca83f6c587072c442a15ec1Timo Sirainen "%s (in mail_privileged_group setting)", error);

c06d6ea0766d0520af1a93e6000c0e73f350e0a2Timo Sirainen return -1;

9aceb071780a949f4e8bf41d3cf80735d9ac7fdfTimo Sirainen }

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen }

1503ac7619d97193d6690292b5f9523552c5d6ceTimo Sirainen if (*set->mail_access_groups != '\0') {

1503ac7619d97193d6690292b5f9523552c5d6ceTimo Sirainen rset.extra_groups = t_strconcat(set->mail_access_groups, ",",

1503ac7619d97193d6690292b5f9523552c5d6ceTimo Sirainen rset.extra_groups, NULL);

1503ac7619d97193d6690292b5f9523552c5d6ceTimo Sirainen }

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen rset.first_valid_gid = set->first_valid_gid;

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen rset.last_valid_gid = set->last_valid_gid;

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen rset.chroot_dir = *priv->chroot == '\0' ? NULL : priv->chroot;

f3e17726502b6cf1912f30aae7e283b5d31ea69cTimo Sirainen rset.system_groups_user = user->system_groups_user;

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen

3c652e7a569c2623d22b4ab30279aebddce4d396Timo Sirainen cur_chroot = restrict_access_get_current_chroot();

3c652e7a569c2623d22b4ab30279aebddce4d396Timo Sirainen if (cur_chroot != NULL) {

b00c511e4675c4a1270d92924fc445cfb8631cf3Timo Sirainen /* we're already chrooted. make sure the chroots are equal. */

3c652e7a569c2623d22b4ab30279aebddce4d396Timo Sirainen if (rset.chroot_dir == NULL) {

3c652e7a569c2623d22b4ab30279aebddce4d396Timo Sirainen *error_r = "Process is already chrooted, "

3c652e7a569c2623d22b4ab30279aebddce4d396Timo Sirainen "can't un-chroot for this user";

3c652e7a569c2623d22b4ab30279aebddce4d396Timo Sirainen return -1;

3c652e7a569c2623d22b4ab30279aebddce4d396Timo Sirainen }

3c652e7a569c2623d22b4ab30279aebddce4d396Timo Sirainen if (strcmp(rset.chroot_dir, cur_chroot) != 0) {

3c652e7a569c2623d22b4ab30279aebddce4d396Timo Sirainen *error_r = t_strdup_printf(

3c652e7a569c2623d22b4ab30279aebddce4d396Timo Sirainen "Process is already chrooted to %s, "

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen "can't chroot to %s", cur_chroot, priv->chroot);

3c652e7a569c2623d22b4ab30279aebddce4d396Timo Sirainen return -1;

3c652e7a569c2623d22b4ab30279aebddce4d396Timo Sirainen }

3c652e7a569c2623d22b4ab30279aebddce4d396Timo Sirainen /* chrooting to same directory where we're already chrooted */

3c652e7a569c2623d22b4ab30279aebddce4d396Timo Sirainen rset.chroot_dir = NULL;

3c652e7a569c2623d22b4ab30279aebddce4d396Timo Sirainen }

3c652e7a569c2623d22b4ab30279aebddce4d396Timo Sirainen

57316ab705807ac3a433e2ec9b8b6ff5d090c3d7Martti Rannanjärvi if (!allow_root &&

c06d6ea0766d0520af1a93e6000c0e73f350e0a2Timo Sirainen (rset.uid == 0 || (rset.uid == (uid_t)-1 && current_euid == 0))) {

c06d6ea0766d0520af1a93e6000c0e73f350e0a2Timo Sirainen *error_r = "Mail access not allowed for root";

c06d6ea0766d0520af1a93e6000c0e73f350e0a2Timo Sirainen return -1;

c06d6ea0766d0520af1a93e6000c0e73f350e0a2Timo Sirainen }

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen

47e9fdee55c2074425cf0316f4f64fbbb790301cTimo Sirainen if (keep_setuid_root) {

8c81109dca287f1830aac57bae61e57260248941Timo Sirainen if (current_euid != rset.uid && rset.uid != (uid_t)-1) {

47e9fdee55c2074425cf0316f4f64fbbb790301cTimo Sirainen if (current_euid != 0) {

47e9fdee55c2074425cf0316f4f64fbbb790301cTimo Sirainen /* we're changing the UID,

20dca965f48c1d7600a268d380c0b5fb5f1011d5Timo Sirainen mail_storage_service_seteuid_root();

47e9fdee55c2074425cf0316f4f64fbbb790301cTimo Sirainen }

47e9fdee55c2074425cf0316f4f64fbbb790301cTimo Sirainen setuid_uid = rset.uid;

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen }

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen rset.uid = (uid_t)-1;

57316ab705807ac3a433e2ec9b8b6ff5d090c3d7Martti Rannanjärvi allow_root = TRUE;

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen }

62fc2fe221eccc834ac6b11b94b55335d5027cd1Timo Sirainen if (!setenv_only) {

57316ab705807ac3a433e2ec9b8b6ff5d090c3d7Martti Rannanjärvi restrict_access(&rset, allow_root ? RESTRICT_ACCESS_FLAG_ALLOW_ROOT : 0,

816d20be0cf95fc4eb1a8aa716639e73b8ba525eMartti Rannanjärvi *priv->home == '\0' ? NULL : priv->home);

62fc2fe221eccc834ac6b11b94b55335d5027cd1Timo Sirainen } else {

62fc2fe221eccc834ac6b11b94b55335d5027cd1Timo Sirainen restrict_access_set_env(&rset);

62fc2fe221eccc834ac6b11b94b55335d5027cd1Timo Sirainen }

62fc2fe221eccc834ac6b11b94b55335d5027cd1Timo Sirainen if (setuid_uid != 0 && !setenv_only) {

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen if (seteuid(setuid_uid) < 0)

20dca965f48c1d7600a268d380c0b5fb5f1011d5Timo Sirainen i_fatal("mail-storage-service: seteuid(%s) failed: %m",

20dca965f48c1d7600a268d380c0b5fb5f1011d5Timo Sirainen dec2str(setuid_uid));

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen }

c06d6ea0766d0520af1a93e6000c0e73f350e0a2Timo Sirainen return 0;

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen}

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainenstatic int

4da8c6cdefabd31262318c32da3c13de1d9ea953Timo Sirainenmail_storage_service_init_post(struct mail_storage_service_ctx *ctx,

2fb9ae42f9e36388ec6db24188b9108434043fd0Timo Sirainen struct mail_storage_service_user *user,

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen struct mail_storage_service_privileges *priv,

2092da86f3a332e8d7eae1300a3b9852fed8f2f8Sergey Kitov const char *session_id_suffix,

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen struct mail_user **mail_user_r,

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen const char **error_r)

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen{

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen const struct mail_storage_settings *mail_set;

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen const char *home = priv->home;

ff4ba036fcdf28d4a1a7e3c1c6c0c71793547bd6Stephan Bosch struct mail_user_connection_data conn_data;

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen struct mail_user *mail_user;

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen

ff4ba036fcdf28d4a1a7e3c1c6c0c71793547bd6Stephan Bosch i_zero(&conn_data);

ff4ba036fcdf28d4a1a7e3c1c6c0c71793547bd6Stephan Bosch conn_data.local_ip = &user->input.local_ip;

ff4ba036fcdf28d4a1a7e3c1c6c0c71793547bd6Stephan Bosch conn_data.remote_ip = &user->input.remote_ip;

211caf3c233d562b0c8137e5eefae3cb1ef13003Stephan Bosch conn_data.local_port = user->input.local_port;

211caf3c233d562b0c8137e5eefae3cb1ef13003Stephan Bosch conn_data.remote_port = user->input.remote_port;

211caf3c233d562b0c8137e5eefae3cb1ef13003Stephan Bosch conn_data.secured = user->input.conn_secured;

211caf3c233d562b0c8137e5eefae3cb1ef13003Stephan Bosch conn_data.ssl_secured = user->input.conn_ssl_secured;

ff4ba036fcdf28d4a1a7e3c1c6c0c71793547bd6Stephan Bosch

1e40531c1de45bc87e72a9d5866ff2af79b63cebTimo Sirainen /* NOTE: if more user initialization is added, add it also to

677cc0d62b41c7506246bf1b992a400a11896474Timo Sirainen mail_user = mail_user_alloc_nodup_set(user->event, user->input.username,

34512eaad8b1b2f929e6d6e3a2f7252c29fba97bTimo Sirainen user->user_info, user->user_set);

691f802ef6ec2105079d420ba26b21088402c6daTimo Sirainen mail_user->_service_user = user;

d1bf4ae66b8bf3b9e28df1823d6d4adda2b923b6Timo Sirainen mail_storage_service_user_ref(user);

2fb9ae42f9e36388ec6db24188b9108434043fd0Timo Sirainen mail_user_set_home(mail_user, *home == '\0' ? NULL : home);

ff4ba036fcdf28d4a1a7e3c1c6c0c71793547bd6Stephan Bosch mail_user_set_vars(mail_user, ctx->service->name, &conn_data);

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen mail_user->uid = priv->uid == (uid_t)-1 ? geteuid() : priv->uid;

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen mail_user->gid = priv->gid == (gid_t)-1 ? getegid() : priv->gid;

e438c85a6b0f77889e25913bbbba808d6078282dStephan Bosch mail_user->anonymous = user->anonymous;

5a9912dcadfd467c5ea54bdc3331eef359f0b1c5Timo Sirainen mail_user->admin = user->admin;

ab90f702ceedb7ba445a9a592be0b213b27cbafaStephan Bosch mail_user->auth_token = p_strdup(mail_user->pool, user->auth_token);

2f90189c6ee66a17f7bf838a8eb8a69868630fb8Timo Sirainen mail_user->auth_user = p_strdup(mail_user->pool, user->auth_user);

a020eb653b2620a989e4795adceb6136037327b2Timo Sirainen if (user->input.session_create_time != 0) {

a020eb653b2620a989e4795adceb6136037327b2Timo Sirainen mail_user->session_create_time =

a020eb653b2620a989e4795adceb6136037327b2Timo Sirainen user->input.session_create_time;

a020eb653b2620a989e4795adceb6136037327b2Timo Sirainen mail_user->session_restored = TRUE;

a020eb653b2620a989e4795adceb6136037327b2Timo Sirainen }

2092da86f3a332e8d7eae1300a3b9852fed8f2f8Sergey Kitov

2092da86f3a332e8d7eae1300a3b9852fed8f2f8Sergey Kitov if (session_id_suffix == NULL) {

2092da86f3a332e8d7eae1300a3b9852fed8f2f8Sergey Kitov if (user->session_id_counter++ == 0) {

2092da86f3a332e8d7eae1300a3b9852fed8f2f8Sergey Kitov mail_user->session_id =

2092da86f3a332e8d7eae1300a3b9852fed8f2f8Sergey Kitov p_strdup(mail_user->pool, user->input.session_id);

2092da86f3a332e8d7eae1300a3b9852fed8f2f8Sergey Kitov } else {

2092da86f3a332e8d7eae1300a3b9852fed8f2f8Sergey Kitov mail_user->session_id =

2092da86f3a332e8d7eae1300a3b9852fed8f2f8Sergey Kitov p_strdup_printf(mail_user->pool, "%s:%u",

2092da86f3a332e8d7eae1300a3b9852fed8f2f8Sergey Kitov user->input.session_id,

2092da86f3a332e8d7eae1300a3b9852fed8f2f8Sergey Kitov user->session_id_counter);

2092da86f3a332e8d7eae1300a3b9852fed8f2f8Sergey Kitov }

2092da86f3a332e8d7eae1300a3b9852fed8f2f8Sergey Kitov } else

c977ee6ce06cbc0b4668fde1ec34f2f5e1773684Timo Sirainen mail_user->session_id =

2092da86f3a332e8d7eae1300a3b9852fed8f2f8Sergey Kitov p_strdup_printf(mail_user->pool, "%s:%s",

c977ee6ce06cbc0b4668fde1ec34f2f5e1773684Timo Sirainen user->input.session_id,

2092da86f3a332e8d7eae1300a3b9852fed8f2f8Sergey Kitov session_id_suffix);

677cc0d62b41c7506246bf1b992a400a11896474Timo Sirainen event_add_str(user->event, "session", mail_user->session_id);

2092da86f3a332e8d7eae1300a3b9852fed8f2f8Sergey Kitov

23152672e3ad7f3512c11df43e8dabba4fe6407dTimo Sirainen mail_user->userdb_fields = user->input.userdb_fields == NULL ? NULL :

23152672e3ad7f3512c11df43e8dabba4fe6407dTimo Sirainen p_strarray_dup(mail_user->pool, user->input.userdb_fields);

e438c85a6b0f77889e25913bbbba808d6078282dStephan Bosch

2fb9ae42f9e36388ec6db24188b9108434043fd0Timo Sirainen mail_set = mail_user_set_get_storage_set(mail_user);

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen

fa2a11210f20fb8998ed656f75e163191c8047e6Timo Sirainen if (mail_set->mail_debug) {

c56500d4363beba4ffa954069ab30f4401849156Timo Sirainen string_t *str = t_str_new(64);

c56500d4363beba4ffa954069ab30f4401849156Timo Sirainen

c56500d4363beba4ffa954069ab30f4401849156Timo Sirainen str_printfa(str, "Effective uid=%s, gid=%s, home=%s",

c56500d4363beba4ffa954069ab30f4401849156Timo Sirainen dec2str(geteuid()), dec2str(getegid()), home);

c56500d4363beba4ffa954069ab30f4401849156Timo Sirainen if (*priv->chroot != '\0')

c56500d4363beba4ffa954069ab30f4401849156Timo Sirainen str_printfa(str, ", chroot=%s", priv->chroot);

c56500d4363beba4ffa954069ab30f4401849156Timo Sirainen i_debug("%s", str_c(str));

fa2a11210f20fb8998ed656f75e163191c8047e6Timo Sirainen }

fa2a11210f20fb8998ed656f75e163191c8047e6Timo Sirainen

b9b841558c5f91db7f5fc71c0ac62aad1bbf6418Timo Sirainen if ((user->flags & MAIL_STORAGE_SERVICE_FLAG_TEMP_PRIV_DROP) != 0 &&

b9b841558c5f91db7f5fc71c0ac62aad1bbf6418Timo Sirainen (user->flags & MAIL_STORAGE_SERVICE_FLAG_ENABLE_CORE_DUMPS) == 0) {

47e9fdee55c2074425cf0316f4f64fbbb790301cTimo Sirainen /* we don't want to write core files to any users' home

2e441a8e3d694820a82d887dcdc4d2d568e428a8Timo Sirainen } else if ((user->flags & MAIL_STORAGE_SERVICE_FLAG_NO_CHDIR) == 0) {

47e9fdee55c2074425cf0316f4f64fbbb790301cTimo Sirainen /* If possible chdir to home directory, so that core file

baf97389e203e105b97a8183b2893740691f8c63Timo Sirainen const char *chdir_path = user->chdir_path != NULL ?

baf97389e203e105b97a8183b2893740691f8c63Timo Sirainen user->chdir_path : home;

baf97389e203e105b97a8183b2893740691f8c63Timo Sirainen

baf97389e203e105b97a8183b2893740691f8c63Timo Sirainen if (chdir_path[0] == '\0') {

2e441a8e3d694820a82d887dcdc4d2d568e428a8Timo Sirainen if (chdir("/") < 0)

2e441a8e3d694820a82d887dcdc4d2d568e428a8Timo Sirainen i_error("chdir(/) failed: %m");

baf97389e203e105b97a8183b2893740691f8c63Timo Sirainen } else if (chdir(chdir_path) < 0) {

0ee3fdb5e94ae6f34cb873ca3c9858342621e55fTimo Sirainen if (errno == EACCES) {

0ee3fdb5e94ae6f34cb873ca3c9858342621e55fTimo Sirainen i_error("%s", eacces_error_get("chdir",

baf97389e203e105b97a8183b2893740691f8c63Timo Sirainen t_strconcat(chdir_path, "/", NULL)));

1fe027b2cac9fd227e7bf639cf0dcba27b47f65cTimo Sirainen } else if (errno != ENOENT)

baf97389e203e105b97a8183b2893740691f8c63Timo Sirainen i_error("chdir(%s) failed: %m", chdir_path);

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen else if (mail_set->mail_debug)

baf97389e203e105b97a8183b2893740691f8c63Timo Sirainen i_debug("Home dir not found: %s", chdir_path);

2e441a8e3d694820a82d887dcdc4d2d568e428a8Timo Sirainen

2e441a8e3d694820a82d887dcdc4d2d568e428a8Timo Sirainen if (chdir("/") < 0)

2e441a8e3d694820a82d887dcdc4d2d568e428a8Timo Sirainen i_error("chdir(/) failed: %m");

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen }

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen }

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen

1b04762685272a53643ac2179939537a44c7c044Timo Sirainen if (mail_user_init(mail_user, error_r) < 0) {

1b04762685272a53643ac2179939537a44c7c044Timo Sirainen mail_user_unref(&mail_user);

1b04762685272a53643ac2179939537a44c7c044Timo Sirainen return -1;

1b04762685272a53643ac2179939537a44c7c044Timo Sirainen }

b9b841558c5f91db7f5fc71c0ac62aad1bbf6418Timo Sirainen if ((user->flags & MAIL_STORAGE_SERVICE_FLAG_NO_NAMESPACES) == 0) {

303e375b7e76278f4ec541f49af0476d3e4ee710Timo Sirainen if (mail_namespaces_init(mail_user, error_r) < 0) {

303e375b7e76278f4ec541f49af0476d3e4ee710Timo Sirainen mail_user_unref(&mail_user);

303e375b7e76278f4ec541f49af0476d3e4ee710Timo Sirainen return -1;

303e375b7e76278f4ec541f49af0476d3e4ee710Timo Sirainen }

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen }

34512eaad8b1b2f929e6d6e3a2f7252c29fba97bTimo Sirainen

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen *mail_user_r = mail_user;

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen return 0;

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen}

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen

85779ec11f23eb8efeb8993b1e0b9aad62c4122aTimo Sirainenvoid mail_storage_service_io_activate_user(struct mail_storage_service_user *user)

cafe72dae0fd4dc48025e0c8dc189bf4901e9f70Timo Sirainen{

cafe72dae0fd4dc48025e0c8dc189bf4901e9f70Timo Sirainen io_loop_context_activate(user->ioloop_ctx);

cafe72dae0fd4dc48025e0c8dc189bf4901e9f70Timo Sirainen}

cafe72dae0fd4dc48025e0c8dc189bf4901e9f70Timo Sirainen

cafe72dae0fd4dc48025e0c8dc189bf4901e9f70Timo Sirainenvoid mail_storage_service_io_deactivate_user(struct mail_storage_service_user *user)

cafe72dae0fd4dc48025e0c8dc189bf4901e9f70Timo Sirainen{

cafe72dae0fd4dc48025e0c8dc189bf4901e9f70Timo Sirainen io_loop_context_deactivate(user->ioloop_ctx);

cafe72dae0fd4dc48025e0c8dc189bf4901e9f70Timo Sirainen}

cafe72dae0fd4dc48025e0c8dc189bf4901e9f70Timo Sirainen

cafe72dae0fd4dc48025e0c8dc189bf4901e9f70Timo Sirainenstatic void

cafe72dae0fd4dc48025e0c8dc189bf4901e9f70Timo Sirainenmail_storage_service_io_activate_user_cb(struct mail_storage_service_user *user)

1388b590dbd85245b591346f860bc1319953318aTimo Sirainen{

d2729522f8b4754b66be7e16548ede39b033fb04Timo Sirainen event_push_global(user->event);

d2729522f8b4754b66be7e16548ede39b033fb04Timo Sirainen if (array_is_created(&user->event_stack)) {

d2729522f8b4754b66be7e16548ede39b033fb04Timo Sirainen struct event *const *events;

d2729522f8b4754b66be7e16548ede39b033fb04Timo Sirainen unsigned int i, count;

d2729522f8b4754b66be7e16548ede39b033fb04Timo Sirainen

d2729522f8b4754b66be7e16548ede39b033fb04Timo Sirainen /* push the global events from stack in reverse order */

d2729522f8b4754b66be7e16548ede39b033fb04Timo Sirainen events = array_get(&user->event_stack, &count);

d2729522f8b4754b66be7e16548ede39b033fb04Timo Sirainen for (i = count; i > 0; i--)

d2729522f8b4754b66be7e16548ede39b033fb04Timo Sirainen event_push_global(events[i-1]);

d2729522f8b4754b66be7e16548ede39b033fb04Timo Sirainen array_clear(&user->event_stack);

d2729522f8b4754b66be7e16548ede39b033fb04Timo Sirainen }

0f8663fcdbb10c162113c76b53a309b59b3bd500Timo Sirainen if (user->log_prefix != NULL)

0f8663fcdbb10c162113c76b53a309b59b3bd500Timo Sirainen i_set_failure_prefix("%s", user->log_prefix);

1388b590dbd85245b591346f860bc1319953318aTimo Sirainen}

1388b590dbd85245b591346f860bc1319953318aTimo Sirainen

cafe72dae0fd4dc48025e0c8dc189bf4901e9f70Timo Sirainenstatic void

cafe72dae0fd4dc48025e0c8dc189bf4901e9f70Timo Sirainenmail_storage_service_io_deactivate_user_cb(struct mail_storage_service_user *user)

1388b590dbd85245b591346f860bc1319953318aTimo Sirainen{

d2729522f8b4754b66be7e16548ede39b033fb04Timo Sirainen struct event *event;

d2729522f8b4754b66be7e16548ede39b033fb04Timo Sirainen

d2729522f8b4754b66be7e16548ede39b033fb04Timo Sirainen /* ioloop context is always global, so we can't push one ioloop context

d2729522f8b4754b66be7e16548ede39b033fb04Timo Sirainen while ((event = event_get_global()) != user->event) {

d2729522f8b4754b66be7e16548ede39b033fb04Timo Sirainen i_assert(event != NULL);

d2729522f8b4754b66be7e16548ede39b033fb04Timo Sirainen if (!array_is_created(&user->event_stack))

d2729522f8b4754b66be7e16548ede39b033fb04Timo Sirainen i_array_init(&user->event_stack, 4);

d2729522f8b4754b66be7e16548ede39b033fb04Timo Sirainen array_append(&user->event_stack, &event, 1);

d2729522f8b4754b66be7e16548ede39b033fb04Timo Sirainen event_pop_global(event);

d2729522f8b4754b66be7e16548ede39b033fb04Timo Sirainen }

d2729522f8b4754b66be7e16548ede39b033fb04Timo Sirainen event_pop_global(user->event);

0f8663fcdbb10c162113c76b53a309b59b3bd500Timo Sirainen if (user->log_prefix != NULL)

0f8663fcdbb10c162113c76b53a309b59b3bd500Timo Sirainen i_set_failure_prefix("%s", user->service_ctx->default_log_prefix);

1388b590dbd85245b591346f860bc1319953318aTimo Sirainen}

1388b590dbd85245b591346f860bc1319953318aTimo Sirainen

38dac3030bdd74acba0a60edd54b2db6d914fde2Timo Sirainenstatic const char *field_get_default(const char *data)

38dac3030bdd74acba0a60edd54b2db6d914fde2Timo Sirainen{

38dac3030bdd74acba0a60edd54b2db6d914fde2Timo Sirainen const char *p;

38dac3030bdd74acba0a60edd54b2db6d914fde2Timo Sirainen

38dac3030bdd74acba0a60edd54b2db6d914fde2Timo Sirainen p = strchr(data, ':');

38dac3030bdd74acba0a60edd54b2db6d914fde2Timo Sirainen if (p == NULL)

38dac3030bdd74acba0a60edd54b2db6d914fde2Timo Sirainen return "";

38dac3030bdd74acba0a60edd54b2db6d914fde2Timo Sirainen else {

38dac3030bdd74acba0a60edd54b2db6d914fde2Timo Sirainen /* default value given */

38dac3030bdd74acba0a60edd54b2db6d914fde2Timo Sirainen return p+1;

38dac3030bdd74acba0a60edd54b2db6d914fde2Timo Sirainen }

38dac3030bdd74acba0a60edd54b2db6d914fde2Timo Sirainen}

38dac3030bdd74acba0a60edd54b2db6d914fde2Timo Sirainen

d23dfc385f22d7a2c466d29501c9e0ce5a243deeTimo Sirainenconst char *mail_storage_service_fields_var_expand(const char *data,

d23dfc385f22d7a2c466d29501c9e0ce5a243deeTimo Sirainen const char *const *fields)

23152672e3ad7f3512c11df43e8dabba4fe6407dTimo Sirainen{

38dac3030bdd74acba0a60edd54b2db6d914fde2Timo Sirainen const char *field_name = t_strcut(data, ':');

2ac5f36aa7c2e7a07ba8815d43a6d7483f62e74cTimo Sirainen unsigned int i;

2ac5f36aa7c2e7a07ba8815d43a6d7483f62e74cTimo Sirainen size_t field_name_len;

23152672e3ad7f3512c11df43e8dabba4fe6407dTimo Sirainen

d23dfc385f22d7a2c466d29501c9e0ce5a243deeTimo Sirainen if (fields == NULL)

38dac3030bdd74acba0a60edd54b2db6d914fde2Timo Sirainen return field_get_default(data);

23152672e3ad7f3512c11df43e8dabba4fe6407dTimo Sirainen

23152672e3ad7f3512c11df43e8dabba4fe6407dTimo Sirainen field_name_len = strlen(field_name);

d23dfc385f22d7a2c466d29501c9e0ce5a243deeTimo Sirainen for (i = 0; fields[i] != NULL; i++) {

d23dfc385f22d7a2c466d29501c9e0ce5a243deeTimo Sirainen if (strncmp(fields[i], field_name, field_name_len) == 0 &&

d23dfc385f22d7a2c466d29501c9e0ce5a243deeTimo Sirainen fields[i][field_name_len] == '=')

d23dfc385f22d7a2c466d29501c9e0ce5a243deeTimo Sirainen return fields[i] + field_name_len+1;

23152672e3ad7f3512c11df43e8dabba4fe6407dTimo Sirainen }

38dac3030bdd74acba0a60edd54b2db6d914fde2Timo Sirainen return field_get_default(data);

23152672e3ad7f3512c11df43e8dabba4fe6407dTimo Sirainen}

23152672e3ad7f3512c11df43e8dabba4fe6407dTimo Sirainen

bcf1cf2afb9692b0db555e6ecf662a2fbd19793dTimo Sirainenstatic int

bcf1cf2afb9692b0db555e6ecf662a2fbd19793dTimo Sirainenmail_storage_service_input_var_userdb(const char *data, void *context,

bcf1cf2afb9692b0db555e6ecf662a2fbd19793dTimo Sirainen const char **value_r,

bcf1cf2afb9692b0db555e6ecf662a2fbd19793dTimo Sirainen const char **error_r ATTR_UNUSED)

d23dfc385f22d7a2c466d29501c9e0ce5a243deeTimo Sirainen{

d23dfc385f22d7a2c466d29501c9e0ce5a243deeTimo Sirainen struct mail_storage_service_user *user = context;

d23dfc385f22d7a2c466d29501c9e0ce5a243deeTimo Sirainen

bcf1cf2afb9692b0db555e6ecf662a2fbd19793dTimo Sirainen *value_r = mail_storage_service_fields_var_expand(data,

d23dfc385f22d7a2c466d29501c9e0ce5a243deeTimo Sirainen user == NULL ? NULL : user->input.userdb_fields);

bcf1cf2afb9692b0db555e6ecf662a2fbd19793dTimo Sirainen return 1;

d23dfc385f22d7a2c466d29501c9e0ce5a243deeTimo Sirainen}

d23dfc385f22d7a2c466d29501c9e0ce5a243deeTimo Sirainen

0f5dc4da3982053036be65190e44bf28a67b1ca2Timo Sirainenstatic int

23152672e3ad7f3512c11df43e8dabba4fe6407dTimo Sirainenmail_storage_service_var_expand(struct mail_storage_service_ctx *ctx,

23152672e3ad7f3512c11df43e8dabba4fe6407dTimo Sirainen string_t *str, const char *format,

23152672e3ad7f3512c11df43e8dabba4fe6407dTimo Sirainen struct mail_storage_service_user *user,

23152672e3ad7f3512c11df43e8dabba4fe6407dTimo Sirainen const struct mail_storage_service_input *input,

0f5dc4da3982053036be65190e44bf28a67b1ca2Timo Sirainen const struct mail_storage_service_privileges *priv,

0f5dc4da3982053036be65190e44bf28a67b1ca2Timo Sirainen const char **error_r)

23152672e3ad7f3512c11df43e8dabba4fe6407dTimo Sirainen{

23152672e3ad7f3512c11df43e8dabba4fe6407dTimo Sirainen static const struct var_expand_func_table func_table[] = {

23152672e3ad7f3512c11df43e8dabba4fe6407dTimo Sirainen { "userdb", mail_storage_service_input_var_userdb },

23152672e3ad7f3512c11df43e8dabba4fe6407dTimo Sirainen { NULL, NULL }

23152672e3ad7f3512c11df43e8dabba4fe6407dTimo Sirainen };

0f5dc4da3982053036be65190e44bf28a67b1ca2Timo Sirainen return var_expand_with_funcs(str, format,

23152672e3ad7f3512c11df43e8dabba4fe6407dTimo Sirainen get_var_expand_table(ctx->service, user, input, priv),

0f5dc4da3982053036be65190e44bf28a67b1ca2Timo Sirainen func_table, user, error_r);

23152672e3ad7f3512c11df43e8dabba4fe6407dTimo Sirainen}

23152672e3ad7f3512c11df43e8dabba4fe6407dTimo Sirainen

d1fff80640050631b06bfab904a34b2ad24601e8Timo Sirainenstatic void

12797080b552a3c1727b73b61cc7427bec0c7472Timo Sirainenmail_storage_service_init_log(struct mail_storage_service_ctx *ctx,

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen struct mail_storage_service_user *user,

13b063ba3ea51256fd97d7fa883f14cb08842b0dTimo Sirainen struct mail_storage_service_privileges *priv)

d1fff80640050631b06bfab904a34b2ad24601e8Timo Sirainen{

0f5dc4da3982053036be65190e44bf28a67b1ca2Timo Sirainen const char *error;

0f5dc4da3982053036be65190e44bf28a67b1ca2Timo Sirainen

12797080b552a3c1727b73b61cc7427bec0c7472Timo Sirainen ctx->log_initialized = TRUE;

d1fff80640050631b06bfab904a34b2ad24601e8Timo Sirainen T_BEGIN {

d1fff80640050631b06bfab904a34b2ad24601e8Timo Sirainen string_t *str;

d1fff80640050631b06bfab904a34b2ad24601e8Timo Sirainen

d1fff80640050631b06bfab904a34b2ad24601e8Timo Sirainen str = t_str_new(256);

0f5dc4da3982053036be65190e44bf28a67b1ca2Timo Sirainen (void)mail_storage_service_var_expand(ctx, str,

23152672e3ad7f3512c11df43e8dabba4fe6407dTimo Sirainen user->user_set->mail_log_prefix,

0f5dc4da3982053036be65190e44bf28a67b1ca2Timo Sirainen user, &user->input, priv, &error);

1388b590dbd85245b591346f860bc1319953318aTimo Sirainen user->log_prefix = p_strdup(user->pool, str_c(str));

d1fff80640050631b06bfab904a34b2ad24601e8Timo Sirainen } T_END;

1388b590dbd85245b591346f860bc1319953318aTimo Sirainen

1388b590dbd85245b591346f860bc1319953318aTimo Sirainen master_service_init_log(ctx->service, user->log_prefix);

d2729522f8b4754b66be7e16548ede39b033fb04Timo Sirainen /* replace the whole log prefix with mail_log_prefix */

d2729522f8b4754b66be7e16548ede39b033fb04Timo Sirainen event_replace_log_prefix(user->event, user->log_prefix);

1388b590dbd85245b591346f860bc1319953318aTimo Sirainen

8abe071cb14a622b9d84b00a9269f96d01a576f6Timo Sirainen if (master_service_get_client_limit(master_service) == 1)

8abe071cb14a622b9d84b00a9269f96d01a576f6Timo Sirainen i_set_failure_send_prefix(user->log_prefix);

d1fff80640050631b06bfab904a34b2ad24601e8Timo Sirainen}

d1fff80640050631b06bfab904a34b2ad24601e8Timo Sirainen

c3a636e4c9ae776e0eed06b6d7ad1ccfb6003afdTimo Sirainenstatic void mail_storage_service_time_moved(time_t old_time, time_t new_time)

c3a636e4c9ae776e0eed06b6d7ad1ccfb6003afdTimo Sirainen{

c3a636e4c9ae776e0eed06b6d7ad1ccfb6003afdTimo Sirainen long diff = new_time - old_time;

c3a636e4c9ae776e0eed06b6d7ad1ccfb6003afdTimo Sirainen

c3a636e4c9ae776e0eed06b6d7ad1ccfb6003afdTimo Sirainen if (diff > 0) {

c3a636e4c9ae776e0eed06b6d7ad1ccfb6003afdTimo Sirainen if (diff > MAX_NOWARN_FORWARD_SECS)

c3a636e4c9ae776e0eed06b6d7ad1ccfb6003afdTimo Sirainen i_warning("Time jumped forwards %ld seconds", diff);

c3a636e4c9ae776e0eed06b6d7ad1ccfb6003afdTimo Sirainen return;

c3a636e4c9ae776e0eed06b6d7ad1ccfb6003afdTimo Sirainen }

c3a636e4c9ae776e0eed06b6d7ad1ccfb6003afdTimo Sirainen diff = -diff;

c3a636e4c9ae776e0eed06b6d7ad1ccfb6003afdTimo Sirainen

c3a636e4c9ae776e0eed06b6d7ad1ccfb6003afdTimo Sirainen if (diff > MAX_TIME_BACKWARDS_SLEEP) {

c3a636e4c9ae776e0eed06b6d7ad1ccfb6003afdTimo Sirainen i_fatal("Time just moved backwards by %ld seconds. "

c3a636e4c9ae776e0eed06b6d7ad1ccfb6003afdTimo Sirainen "This might cause a lot of problems, "

c3a636e4c9ae776e0eed06b6d7ad1ccfb6003afdTimo Sirainen "so I'll just kill myself now. "

0992011130e9d0a498ca860ddbe4028398a530c5Timo Sirainen "http://wiki2.dovecot.org/TimeMovedBackwards", diff);

c3a636e4c9ae776e0eed06b6d7ad1ccfb6003afdTimo Sirainen } else {

c3a636e4c9ae776e0eed06b6d7ad1ccfb6003afdTimo Sirainen i_error("Time just moved backwards by %ld seconds. "

c3a636e4c9ae776e0eed06b6d7ad1ccfb6003afdTimo Sirainen "I'll sleep now until we're back in present. "

0992011130e9d0a498ca860ddbe4028398a530c5Timo Sirainen "http://wiki2.dovecot.org/TimeMovedBackwards", diff);

c3a636e4c9ae776e0eed06b6d7ad1ccfb6003afdTimo Sirainen /* Sleep extra second to make sure usecs also grows. */

c3a636e4c9ae776e0eed06b6d7ad1ccfb6003afdTimo Sirainen diff++;

c3a636e4c9ae776e0eed06b6d7ad1ccfb6003afdTimo Sirainen

c3a636e4c9ae776e0eed06b6d7ad1ccfb6003afdTimo Sirainen while (diff > 0 && sleep(diff) != 0) {

c3a636e4c9ae776e0eed06b6d7ad1ccfb6003afdTimo Sirainen /* don't use sleep()'s return value, because

c3a636e4c9ae776e0eed06b6d7ad1ccfb6003afdTimo Sirainen diff = old_time - time(NULL) + 1;

c3a636e4c9ae776e0eed06b6d7ad1ccfb6003afdTimo Sirainen }

c3a636e4c9ae776e0eed06b6d7ad1ccfb6003afdTimo Sirainen }

c3a636e4c9ae776e0eed06b6d7ad1ccfb6003afdTimo Sirainen}

4da8c6cdefabd31262318c32da3c13de1d9ea953Timo Sirainen

4da8c6cdefabd31262318c32da3c13de1d9ea953Timo Sirainenstruct mail_storage_service_ctx *

4da8c6cdefabd31262318c32da3c13de1d9ea953Timo Sirainenmail_storage_service_init(struct master_service *service,

4da8c6cdefabd31262318c32da3c13de1d9ea953Timo Sirainen const struct setting_parser_info *set_roots[],

4da8c6cdefabd31262318c32da3c13de1d9ea953Timo Sirainen enum mail_storage_service_flags flags)

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen{

4da8c6cdefabd31262318c32da3c13de1d9ea953Timo Sirainen struct mail_storage_service_ctx *ctx;

3c932c0a21349f23dd38c50c12b3a24717dfbc28Timo Sirainen const char *version;

5d03d9f439e41c90215a3c938ffebe4c2a8ae257Timo Sirainen pool_t pool;

4da8c6cdefabd31262318c32da3c13de1d9ea953Timo Sirainen unsigned int count;

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen

3c932c0a21349f23dd38c50c12b3a24717dfbc28Timo Sirainen version = master_service_get_version_string(service);

3c932c0a21349f23dd38c50c12b3a24717dfbc28Timo Sirainen if (version != NULL && strcmp(version, PACKAGE_VERSION) != 0) {

3c932c0a21349f23dd38c50c12b3a24717dfbc28Timo Sirainen i_fatal("Version mismatch: libdovecot-storage.so is '%s', "

3c932c0a21349f23dd38c50c12b3a24717dfbc28Timo Sirainen "while the running Dovecot binary is '%s'",

3c932c0a21349f23dd38c50c12b3a24717dfbc28Timo Sirainen PACKAGE_VERSION, version);

3c932c0a21349f23dd38c50c12b3a24717dfbc28Timo Sirainen }

3c932c0a21349f23dd38c50c12b3a24717dfbc28Timo Sirainen

1cb065514fcfe00b684ee274239e3f0390c7fc47Timo Sirainen if ((flags & MAIL_STORAGE_SERVICE_FLAG_TEMP_PRIV_DROP) != 0 &&

32223e1a31b6f060ab3abcc26a630e7cca0abc89Timo Sirainen getuid() != 0) {

1cb065514fcfe00b684ee274239e3f0390c7fc47Timo Sirainen /* service { user } isn't root. the permission drop can't be

1cb065514fcfe00b684ee274239e3f0390c7fc47Timo Sirainen flags &= ~MAIL_STORAGE_SERVICE_FLAG_TEMP_PRIV_DROP;

1cb065514fcfe00b684ee274239e3f0390c7fc47Timo Sirainen }

1cb065514fcfe00b684ee274239e3f0390c7fc47Timo Sirainen

4da8c6cdefabd31262318c32da3c13de1d9ea953Timo Sirainen (void)umask(0077);

c3a636e4c9ae776e0eed06b6d7ad1ccfb6003afdTimo Sirainen io_loop_set_time_moved_callback(current_ioloop,

c3a636e4c9ae776e0eed06b6d7ad1ccfb6003afdTimo Sirainen mail_storage_service_time_moved);

f934b271c69c7b3e5e3bca23ff9b3ab6187262c2Timo Sirainen

4da8c6cdefabd31262318c32da3c13de1d9ea953Timo Sirainen mail_storage_init();

f38485358ffc04c3466b917770575e29deef24c3Timo Sirainen

5d03d9f439e41c90215a3c938ffebe4c2a8ae257Timo Sirainen pool = pool_alloconly_create("mail storage service", 2048);

5d03d9f439e41c90215a3c938ffebe4c2a8ae257Timo Sirainen ctx = p_new(pool, struct mail_storage_service_ctx, 1);

5d03d9f439e41c90215a3c938ffebe4c2a8ae257Timo Sirainen ctx->pool = pool;

4da8c6cdefabd31262318c32da3c13de1d9ea953Timo Sirainen ctx->service = service;

4da8c6cdefabd31262318c32da3c13de1d9ea953Timo Sirainen ctx->flags = flags;

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen

4da8c6cdefabd31262318c32da3c13de1d9ea953Timo Sirainen /* @UNSAFE */

4da8c6cdefabd31262318c32da3c13de1d9ea953Timo Sirainen if (set_roots == NULL)

4da8c6cdefabd31262318c32da3c13de1d9ea953Timo Sirainen count = 0;

4da8c6cdefabd31262318c32da3c13de1d9ea953Timo Sirainen else

4da8c6cdefabd31262318c32da3c13de1d9ea953Timo Sirainen for (count = 0; set_roots[count] != NULL; count++) ;

878a83a906e1be6354b563ead096955a22ad5fbeTimo Sirainen ctx->set_roots =

878a83a906e1be6354b563ead096955a22ad5fbeTimo Sirainen p_new(pool, const struct setting_parser_info *, count + 2);

4da8c6cdefabd31262318c32da3c13de1d9ea953Timo Sirainen ctx->set_roots[0] = &mail_user_setting_parser_info;

b879ed8dd4b5850987e6b89a92f794d87c6be7d7Timo Sirainen if (set_roots != NULL) {

b879ed8dd4b5850987e6b89a92f794d87c6be7d7Timo Sirainen memcpy(ctx->set_roots + 1, set_roots,

b879ed8dd4b5850987e6b89a92f794d87c6be7d7Timo Sirainen sizeof(*ctx->set_roots) * count);

b879ed8dd4b5850987e6b89a92f794d87c6be7d7Timo Sirainen }

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen

4da8c6cdefabd31262318c32da3c13de1d9ea953Timo Sirainen /* do all the global initialization. delay initializing plugins until

705f6fbad395e6f014838e797b7dbcaceafd2f1dTimo Sirainen if ((flags & MAIL_STORAGE_SERVICE_FLAG_NO_LOG_INIT) == 0) {

12797080b552a3c1727b73b61cc7427bec0c7472Timo Sirainen /* note: we may not have read any settings yet, so this logging

1388b590dbd85245b591346f860bc1319953318aTimo Sirainen ctx->default_log_prefix =

1388b590dbd85245b591346f860bc1319953318aTimo Sirainen p_strconcat(pool, service->name, ": ", NULL);

1388b590dbd85245b591346f860bc1319953318aTimo Sirainen master_service_init_log(service, ctx->default_log_prefix);

8f5b34c22e4c3bfb35ca13c4744867eb5ddbd3d6Timo Sirainen }

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen dict_drivers_register_builtin();

4da8c6cdefabd31262318c32da3c13de1d9ea953Timo Sirainen return ctx;

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen}

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen

4da8c6cdefabd31262318c32da3c13de1d9ea953Timo Sirainenstruct auth_master_connection *

4da8c6cdefabd31262318c32da3c13de1d9ea953Timo Sirainenmail_storage_service_get_auth_conn(struct mail_storage_service_ctx *ctx)

2eb0402a28bd0422e0170160808c67d6c7274689Timo Sirainen{

97180ea9c26c4de0807daaad21e03c80643b09fdTimo Sirainen i_assert(ctx->conn != NULL);

4da8c6cdefabd31262318c32da3c13de1d9ea953Timo Sirainen return ctx->conn;

2eb0402a28bd0422e0170160808c67d6c7274689Timo Sirainen}

2eb0402a28bd0422e0170160808c67d6c7274689Timo Sirainen

b9b841558c5f91db7f5fc71c0ac62aad1bbf6418Timo Sirainenstatic enum mail_storage_service_flags

b9b841558c5f91db7f5fc71c0ac62aad1bbf6418Timo Sirainenmail_storage_service_input_get_flags(struct mail_storage_service_ctx *ctx,

b9b841558c5f91db7f5fc71c0ac62aad1bbf6418Timo Sirainen const struct mail_storage_service_input *input)

b9b841558c5f91db7f5fc71c0ac62aad1bbf6418Timo Sirainen{

b9b841558c5f91db7f5fc71c0ac62aad1bbf6418Timo Sirainen enum mail_storage_service_flags flags;

b9b841558c5f91db7f5fc71c0ac62aad1bbf6418Timo Sirainen

b9b841558c5f91db7f5fc71c0ac62aad1bbf6418Timo Sirainen flags = (ctx->flags & ~input->flags_override_remove) |

b9b841558c5f91db7f5fc71c0ac62aad1bbf6418Timo Sirainen input->flags_override_add;

b9b841558c5f91db7f5fc71c0ac62aad1bbf6418Timo Sirainen if (input->no_userdb_lookup) {

b9b841558c5f91db7f5fc71c0ac62aad1bbf6418Timo Sirainen /* FIXME: for API backwards compatibility only */

b9b841558c5f91db7f5fc71c0ac62aad1bbf6418Timo Sirainen flags &= ~MAIL_STORAGE_SERVICE_FLAG_USERDB_LOOKUP;

b9b841558c5f91db7f5fc71c0ac62aad1bbf6418Timo Sirainen }

b9b841558c5f91db7f5fc71c0ac62aad1bbf6418Timo Sirainen return flags;

b9b841558c5f91db7f5fc71c0ac62aad1bbf6418Timo Sirainen}

b9b841558c5f91db7f5fc71c0ac62aad1bbf6418Timo Sirainen

2fb9ae42f9e36388ec6db24188b9108434043fd0Timo Sirainenint mail_storage_service_read_settings(struct mail_storage_service_ctx *ctx,

2fb9ae42f9e36388ec6db24188b9108434043fd0Timo Sirainen const struct mail_storage_service_input *input,

2fb9ae42f9e36388ec6db24188b9108434043fd0Timo Sirainen pool_t pool,

2fb9ae42f9e36388ec6db24188b9108434043fd0Timo Sirainen const struct setting_parser_info **user_info_r,

5d03d9f439e41c90215a3c938ffebe4c2a8ae257Timo Sirainen const struct setting_parser_context **parser_r,

2fb9ae42f9e36388ec6db24188b9108434043fd0Timo Sirainen const char **error_r)

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen{

4da8c6cdefabd31262318c32da3c13de1d9ea953Timo Sirainen struct master_service_settings_input set_input;

9b78c0d5e13141f4df6c6e483f854e5acb861288Timo Sirainen const struct setting_parser_info *const *roots;

5d03d9f439e41c90215a3c938ffebe4c2a8ae257Timo Sirainen struct master_service_settings_output set_output;

dbe06905918a415a34c5621b9fdf45be0b9c8e64Timo Sirainen const struct dynamic_settings_parser *dyn_parsers;

b9b841558c5f91db7f5fc71c0ac62aad1bbf6418Timo Sirainen enum mail_storage_service_flags flags;

2fb9ae42f9e36388ec6db24188b9108434043fd0Timo Sirainen unsigned int i;

4da8c6cdefabd31262318c32da3c13de1d9ea953Timo Sirainen

49fd8c950e3da2ed32506e617a4b1480a07f874fTimo Sirainen ctx->config_permission_denied = FALSE;

49fd8c950e3da2ed32506e617a4b1480a07f874fTimo Sirainen

8d5c97bf940e43e8ec6e9f1ec8655f3b20edafbeTimo Sirainen flags = input == NULL ? ctx->flags :

8d5c97bf940e43e8ec6e9f1ec8655f3b20edafbeTimo Sirainen mail_storage_service_input_get_flags(ctx, input);

b9b841558c5f91db7f5fc71c0ac62aad1bbf6418Timo Sirainen

efe78d3ba24fc866af1c79b9223dc0809ba26cadStephan Bosch i_zero(&set_input);

4da8c6cdefabd31262318c32da3c13de1d9ea953Timo Sirainen set_input.roots = ctx->set_roots;

d5eb47a791ec56149fd711cd8e44efc8babeaae5Timo Sirainen set_input.preserve_user = TRUE;

2fb9ae42f9e36388ec6db24188b9108434043fd0Timo Sirainen /* settings reader may exec doveconf, which is going to clear

762e17079d29d9f1838114ff5fec9ceaba8eb6a8Timo Sirainen set_input.preserve_home =

b9b841558c5f91db7f5fc71c0ac62aad1bbf6418Timo Sirainen (flags & MAIL_STORAGE_SERVICE_FLAG_USERDB_LOOKUP) == 0;

50349cd047ca9e7c100cbeb70acfe26672649959Timo Sirainen set_input.use_sysexits =

b9b841558c5f91db7f5fc71c0ac62aad1bbf6418Timo Sirainen (flags & MAIL_STORAGE_SERVICE_FLAG_USE_SYSEXITS) != 0;

2fb9ae42f9e36388ec6db24188b9108434043fd0Timo Sirainen

4da8c6cdefabd31262318c32da3c13de1d9ea953Timo Sirainen if (input != NULL) {

4da8c6cdefabd31262318c32da3c13de1d9ea953Timo Sirainen set_input.module = input->module;

4da8c6cdefabd31262318c32da3c13de1d9ea953Timo Sirainen set_input.service = input->service;

4da8c6cdefabd31262318c32da3c13de1d9ea953Timo Sirainen set_input.username = input->username;

4da8c6cdefabd31262318c32da3c13de1d9ea953Timo Sirainen set_input.local_ip = input->local_ip;

4da8c6cdefabd31262318c32da3c13de1d9ea953Timo Sirainen set_input.remote_ip = input->remote_ip;

4da8c6cdefabd31262318c32da3c13de1d9ea953Timo Sirainen }

d2ca20a479e76af8557b4a74b0b51e4de0e3c9e3Timo Sirainen if (input == NULL) {

d2ca20a479e76af8557b4a74b0b51e4de0e3c9e3Timo Sirainen /* global settings read - don't create a cache for thi */

d2ca20a479e76af8557b4a74b0b51e4de0e3c9e3Timo Sirainen } else if (ctx->set_cache == NULL) {

674f541b16689c0ed090dac32db94463c5af3977Timo Sirainen ctx->set_cache_module = p_strdup(ctx->pool, set_input.module);

674f541b16689c0ed090dac32db94463c5af3977Timo Sirainen ctx->set_cache_service = p_strdup(ctx->pool, set_input.service);

5d03d9f439e41c90215a3c938ffebe4c2a8ae257Timo Sirainen ctx->set_cache = master_service_settings_cache_init(

674f541b16689c0ed090dac32db94463c5af3977Timo Sirainen ctx->service, set_input.module, set_input.service);

faca2afa3576c50caf28e0f009555325d2a49e0bTimo Sirainen } else {

faca2afa3576c50caf28e0f009555325d2a49e0bTimo Sirainen /* already looked up settings at least once.

faca2afa3576c50caf28e0f009555325d2a49e0bTimo Sirainen set_input.never_exec = TRUE;

5d03d9f439e41c90215a3c938ffebe4c2a8ae257Timo Sirainen }

5d03d9f439e41c90215a3c938ffebe4c2a8ae257Timo Sirainen

dbe06905918a415a34c5621b9fdf45be0b9c8e64Timo Sirainen dyn_parsers = mail_storage_get_dynamic_parsers(pool);

674f541b16689c0ed090dac32db94463c5af3977Timo Sirainen if (null_strcmp(set_input.module, ctx->set_cache_module) == 0 &&

d2ca20a479e76af8557b4a74b0b51e4de0e3c9e3Timo Sirainen null_strcmp(set_input.service, ctx->set_cache_service) == 0 &&

d2ca20a479e76af8557b4a74b0b51e4de0e3c9e3Timo Sirainen ctx->set_cache != NULL) {

5d03d9f439e41c90215a3c938ffebe4c2a8ae257Timo Sirainen if (master_service_settings_cache_read(ctx->set_cache,

9b78c0d5e13141f4df6c6e483f854e5acb861288Timo Sirainen &set_input, dyn_parsers,

3b22894b8805b186c73d8b754001e8d7e944be85Timo Sirainen parser_r, error_r) < 0) {

3b22894b8805b186c73d8b754001e8d7e944be85Timo Sirainen *error_r = t_strdup_printf(

3b22894b8805b186c73d8b754001e8d7e944be85Timo Sirainen "Error reading configuration: %s", *error_r);

5d03d9f439e41c90215a3c938ffebe4c2a8ae257Timo Sirainen return -1;

3b22894b8805b186c73d8b754001e8d7e944be85Timo Sirainen }

5d03d9f439e41c90215a3c938ffebe4c2a8ae257Timo Sirainen } else {

9b78c0d5e13141f4df6c6e483f854e5acb861288Timo Sirainen settings_parser_dyn_update(pool, &set_input.roots, dyn_parsers);

5d03d9f439e41c90215a3c938ffebe4c2a8ae257Timo Sirainen if (master_service_settings_read(ctx->service, &set_input,

5d03d9f439e41c90215a3c938ffebe4c2a8ae257Timo Sirainen &set_output, error_r) < 0) {

5d03d9f439e41c90215a3c938ffebe4c2a8ae257Timo Sirainen *error_r = t_strdup_printf(

5d03d9f439e41c90215a3c938ffebe4c2a8ae257Timo Sirainen "Error reading configuration: %s", *error_r);

49fd8c950e3da2ed32506e617a4b1480a07f874fTimo Sirainen ctx->config_permission_denied =

49fd8c950e3da2ed32506e617a4b1480a07f874fTimo Sirainen set_output.permission_denied;

5d03d9f439e41c90215a3c938ffebe4c2a8ae257Timo Sirainen return -1;

5d03d9f439e41c90215a3c938ffebe4c2a8ae257Timo Sirainen }

5d03d9f439e41c90215a3c938ffebe4c2a8ae257Timo Sirainen *parser_r = ctx->service->set_parser;

4da8c6cdefabd31262318c32da3c13de1d9ea953Timo Sirainen }

2fb9ae42f9e36388ec6db24188b9108434043fd0Timo Sirainen

9b78c0d5e13141f4df6c6e483f854e5acb861288Timo Sirainen roots = settings_parser_get_roots(*parser_r);

9b78c0d5e13141f4df6c6e483f854e5acb861288Timo Sirainen for (i = 0; roots[i] != NULL; i++) {

9b78c0d5e13141f4df6c6e483f854e5acb861288Timo Sirainen if (strcmp(roots[i]->module_name,

5d03d9f439e41c90215a3c938ffebe4c2a8ae257Timo Sirainen mail_user_setting_parser_info.module_name) == 0) {

9b78c0d5e13141f4df6c6e483f854e5acb861288Timo Sirainen *user_info_r = roots[i];

2fb9ae42f9e36388ec6db24188b9108434043fd0Timo Sirainen return 0;

2fb9ae42f9e36388ec6db24188b9108434043fd0Timo Sirainen }

2fb9ae42f9e36388ec6db24188b9108434043fd0Timo Sirainen }

2fb9ae42f9e36388ec6db24188b9108434043fd0Timo Sirainen i_unreached();

2fb9ae42f9e36388ec6db24188b9108434043fd0Timo Sirainen return -1;

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen}

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen

50b9773bebe5c66485728e21e4da6e99db388c92Timo Sirainenvoid mail_storage_service_set_auth_conn(struct mail_storage_service_ctx *ctx,

50b9773bebe5c66485728e21e4da6e99db388c92Timo Sirainen struct auth_master_connection *conn)

50b9773bebe5c66485728e21e4da6e99db388c92Timo Sirainen{

50b9773bebe5c66485728e21e4da6e99db388c92Timo Sirainen i_assert(ctx->conn == NULL);

50b9773bebe5c66485728e21e4da6e99db388c92Timo Sirainen i_assert(mail_user_auth_master_conn == NULL);

50b9773bebe5c66485728e21e4da6e99db388c92Timo Sirainen

50b9773bebe5c66485728e21e4da6e99db388c92Timo Sirainen ctx->conn = conn;

50b9773bebe5c66485728e21e4da6e99db388c92Timo Sirainen mail_user_auth_master_conn = conn;

50b9773bebe5c66485728e21e4da6e99db388c92Timo Sirainen}

50b9773bebe5c66485728e21e4da6e99db388c92Timo Sirainen

4da8c6cdefabd31262318c32da3c13de1d9ea953Timo Sirainenstatic void

4da8c6cdefabd31262318c32da3c13de1d9ea953Timo Sirainenmail_storage_service_first_init(struct mail_storage_service_ctx *ctx,

2fb9ae42f9e36388ec6db24188b9108434043fd0Timo Sirainen const struct setting_parser_info *user_info,

4da8c6cdefabd31262318c32da3c13de1d9ea953Timo Sirainen const struct mail_user_settings *user_set)

8d3278a82b964217d95c340ec6f82037cdc59d19Timo Sirainen{

c5a6a6565be93224fc26522eda855b0990f256e8Timo Sirainen enum auth_master_flags flags = 0;

f934b271c69c7b3e5e3bca23ff9b3ab6187262c2Timo Sirainen

72f2a851238e5661695c63bff0e9a9e800ba577aTimo Sirainen ctx->debug = mail_user_set_get_mail_debug(user_info, user_set);

c5a6a6565be93224fc26522eda855b0990f256e8Timo Sirainen if (ctx->debug)

c5a6a6565be93224fc26522eda855b0990f256e8Timo Sirainen flags |= AUTH_MASTER_FLAG_DEBUG;

c5a6a6565be93224fc26522eda855b0990f256e8Timo Sirainen if ((ctx->flags & MAIL_STORAGE_SERVICE_FLAG_NO_IDLE_TIMEOUT) != 0)

c5a6a6565be93224fc26522eda855b0990f256e8Timo Sirainen flags |= AUTH_MASTER_FLAG_NO_IDLE_TIMEOUT;

50b9773bebe5c66485728e21e4da6e99db388c92Timo Sirainen mail_storage_service_set_auth_conn(ctx,

50b9773bebe5c66485728e21e4da6e99db388c92Timo Sirainen auth_master_init(user_set->auth_socket_path, flags));

fc464e5b2b2ab4d415a5d5b90ce4475d34620a75Timo Sirainen}

fc464e5b2b2ab4d415a5d5b90ce4475d34620a75Timo Sirainen

351668ae6972c9f55059501ddb2ed6e70afa2f31Timo Sirainenstatic int

48ada47cce07fb7195a3437224c7c25f542326b0Timo Sirainenmail_storage_service_load_modules(struct mail_storage_service_ctx *ctx,

9ba7e76c20be775f368254e3059a6189fe789f16Timo Sirainen const struct setting_parser_info *user_info,

351668ae6972c9f55059501ddb2ed6e70afa2f31Timo Sirainen const struct mail_user_settings *user_set,

351668ae6972c9f55059501ddb2ed6e70afa2f31Timo Sirainen const char **error_r)

48ada47cce07fb7195a3437224c7c25f542326b0Timo Sirainen{

9ba7e76c20be775f368254e3059a6189fe789f16Timo Sirainen struct module_dir_load_settings mod_set;

48ada47cce07fb7195a3437224c7c25f542326b0Timo Sirainen

48ada47cce07fb7195a3437224c7c25f542326b0Timo Sirainen if (*user_set->mail_plugins == '\0')

351668ae6972c9f55059501ddb2ed6e70afa2f31Timo Sirainen return 0;

705f6fbad395e6f014838e797b7dbcaceafd2f1dTimo Sirainen if ((ctx->flags & MAIL_STORAGE_SERVICE_FLAG_NO_PLUGINS) != 0)

351668ae6972c9f55059501ddb2ed6e70afa2f31Timo Sirainen return 0;

48ada47cce07fb7195a3437224c7c25f542326b0Timo Sirainen

efe78d3ba24fc866af1c79b9223dc0809ba26cadStephan Bosch i_zero(&mod_set);

bd63b5b860658b01b1f46f26d406e1e4a9dc019aTimo Sirainen mod_set.abi_version = DOVECOT_ABI_VERSION;

8552b0cad8ffe9ccb8270577ba28b8010c89af11Timo Sirainen mod_set.binary_name = master_service_get_name(ctx->service);

98c3aa2587ad3e81e1548a3a4f79b2a24566cec3Timo Sirainen mod_set.setting_name = "mail_plugins";

9ba7e76c20be775f368254e3059a6189fe789f16Timo Sirainen mod_set.require_init_funcs = TRUE;

72f2a851238e5661695c63bff0e9a9e800ba577aTimo Sirainen mod_set.debug = mail_user_set_get_mail_debug(user_info, user_set);

9ba7e76c20be775f368254e3059a6189fe789f16Timo Sirainen

351668ae6972c9f55059501ddb2ed6e70afa2f31Timo Sirainen return module_dir_try_load_missing(&mail_storage_service_modules,

351668ae6972c9f55059501ddb2ed6e70afa2f31Timo Sirainen user_set->mail_plugin_dir,

351668ae6972c9f55059501ddb2ed6e70afa2f31Timo Sirainen user_set->mail_plugins,

351668ae6972c9f55059501ddb2ed6e70afa2f31Timo Sirainen &mod_set, error_r);

48ada47cce07fb7195a3437224c7c25f542326b0Timo Sirainen}

48ada47cce07fb7195a3437224c7c25f542326b0Timo Sirainen

c56500d4363beba4ffa954069ab30f4401849156Timo Sirainenstatic int extra_field_key_cmp_p(const char *const *s1, const char *const *s2)

c56500d4363beba4ffa954069ab30f4401849156Timo Sirainen{

c56500d4363beba4ffa954069ab30f4401849156Timo Sirainen const char *p1 = *s1, *p2 = *s2;

c56500d4363beba4ffa954069ab30f4401849156Timo Sirainen

c56500d4363beba4ffa954069ab30f4401849156Timo Sirainen for (; *p1 == *p2; p1++, p2++) {

c56500d4363beba4ffa954069ab30f4401849156Timo Sirainen if (*p1 == '\0')

c56500d4363beba4ffa954069ab30f4401849156Timo Sirainen return 0;

c56500d4363beba4ffa954069ab30f4401849156Timo Sirainen }

c56500d4363beba4ffa954069ab30f4401849156Timo Sirainen if (*p1 == '=')

c56500d4363beba4ffa954069ab30f4401849156Timo Sirainen return -1;

c56500d4363beba4ffa954069ab30f4401849156Timo Sirainen if (*p2 == '=')

c56500d4363beba4ffa954069ab30f4401849156Timo Sirainen return 1;

c56500d4363beba4ffa954069ab30f4401849156Timo Sirainen return *p1 - *p2;

c56500d4363beba4ffa954069ab30f4401849156Timo Sirainen}

c56500d4363beba4ffa954069ab30f4401849156Timo Sirainen

39f5c2b2143842ff6f827b7198cae8853b8c5bbaTimo Sirainenstatic void

39f5c2b2143842ff6f827b7198cae8853b8c5bbaTimo Sirainenmail_storage_service_set_log_prefix(struct mail_storage_service_ctx *ctx,

39f5c2b2143842ff6f827b7198cae8853b8c5bbaTimo Sirainen const struct mail_user_settings *user_set,

39f5c2b2143842ff6f827b7198cae8853b8c5bbaTimo Sirainen struct mail_storage_service_user *user,

39f5c2b2143842ff6f827b7198cae8853b8c5bbaTimo Sirainen const struct mail_storage_service_input *input,

39f5c2b2143842ff6f827b7198cae8853b8c5bbaTimo Sirainen const struct mail_storage_service_privileges *priv)

39f5c2b2143842ff6f827b7198cae8853b8c5bbaTimo Sirainen{

39f5c2b2143842ff6f827b7198cae8853b8c5bbaTimo Sirainen string_t *str;

0f5dc4da3982053036be65190e44bf28a67b1ca2Timo Sirainen const char *error;

39f5c2b2143842ff6f827b7198cae8853b8c5bbaTimo Sirainen

39f5c2b2143842ff6f827b7198cae8853b8c5bbaTimo Sirainen str = t_str_new(256);

0f5dc4da3982053036be65190e44bf28a67b1ca2Timo Sirainen (void)mail_storage_service_var_expand(ctx, str, user_set->mail_log_prefix,

0f5dc4da3982053036be65190e44bf28a67b1ca2Timo Sirainen user, input, priv, &error);

39f5c2b2143842ff6f827b7198cae8853b8c5bbaTimo Sirainen i_set_failure_prefix("%s", str_c(str));

39f5c2b2143842ff6f827b7198cae8853b8c5bbaTimo Sirainen}

39f5c2b2143842ff6f827b7198cae8853b8c5bbaTimo Sirainen

1959accd3886d99efccd9f98247f21e8fd54da66Timo Sirainenstatic const char *

1959accd3886d99efccd9f98247f21e8fd54da66Timo Sirainenmail_storage_service_generate_session_id(pool_t pool, const char *prefix)

d6601a0bc4fd60e58bedbddf2481abd82cba76d7Timo Sirainen{

d6601a0bc4fd60e58bedbddf2481abd82cba76d7Timo Sirainen guid_128_t guid;

2ac5f36aa7c2e7a07ba8815d43a6d7483f62e74cTimo Sirainen size_t prefix_len = prefix == NULL ? 0 : strlen(prefix);