src/lib-storage/mail-user.c

	mail-user.c revision 87ca4b209c10954826b878da165d303d9b4dc5a2
5f5870385cff47efd2f58e7892f251cf13761528Timo Sirainen/* Copyright (c) 2008-2012 Dovecot authors, see the included COPYING file */
128ab2c52a29068be87e12ab5aebbb8fdc933adfTimo Sirainen
128ab2c52a29068be87e12ab5aebbb8fdc933adfTimo Sirainen#include "lib.h"
128ab2c52a29068be87e12ab5aebbb8fdc933adfTimo Sirainen#include "array.h"
128ab2c52a29068be87e12ab5aebbb8fdc933adfTimo Sirainen#include "hostpid.h"
128ab2c52a29068be87e12ab5aebbb8fdc933adfTimo Sirainen#include "net.h"
128ab2c52a29068be87e12ab5aebbb8fdc933adfTimo Sirainen#include "module-dir.h"
e156adefc1260d31a145df2f5e9b3c82050d4163Timo Sirainen#include "home-expand.h"
128ab2c52a29068be87e12ab5aebbb8fdc933adfTimo Sirainen#include "safe-mkstemp.h"
128ab2c52a29068be87e12ab5aebbb8fdc933adfTimo Sirainen#include "str.h"
128ab2c52a29068be87e12ab5aebbb8fdc933adfTimo Sirainen#include "strescape.h"
128ab2c52a29068be87e12ab5aebbb8fdc933adfTimo Sirainen#include "var-expand.h"
128ab2c52a29068be87e12ab5aebbb8fdc933adfTimo Sirainen#include "settings-parser.h"
128ab2c52a29068be87e12ab5aebbb8fdc933adfTimo Sirainen#include "auth-master.h"
a10ed8c47534b4c6b6bf2711ccfe577e720a47b4Timo Sirainen#include "master-service.h"
e156adefc1260d31a145df2f5e9b3c82050d4163Timo Sirainen#include "mountpoint-list.h"
e156adefc1260d31a145df2f5e9b3c82050d4163Timo Sirainen#include "mail-storage-settings.h"
128ab2c52a29068be87e12ab5aebbb8fdc933adfTimo Sirainen#include "mail-storage-private.h"
128ab2c52a29068be87e12ab5aebbb8fdc933adfTimo Sirainen#include "mail-storage-service.h"
128ab2c52a29068be87e12ab5aebbb8fdc933adfTimo Sirainen#include "mail-namespace.h"
128ab2c52a29068be87e12ab5aebbb8fdc933adfTimo Sirainen#include "mail-storage.h"
4ded3d18fa391ae5908f9834f1390cf55e8c99d5Timo Sirainen#include "mail-user.h"
128ab2c52a29068be87e12ab5aebbb8fdc933adfTimo Sirainen
128ab2c52a29068be87e12ab5aebbb8fdc933adfTimo Sirainen#include <stdlib.h>
128ab2c52a29068be87e12ab5aebbb8fdc933adfTimo Sirainen
128ab2c52a29068be87e12ab5aebbb8fdc933adfTimo Sirainenstruct mail_user_module_register mail_user_module_register = { 0 };
128ab2c52a29068be87e12ab5aebbb8fdc933adfTimo Sirainenstruct auth_master_connection *mail_user_auth_master_conn;
128ab2c52a29068be87e12ab5aebbb8fdc933adfTimo Sirainen
128ab2c52a29068be87e12ab5aebbb8fdc933adfTimo Sirainenstatic void mail_user_deinit_base(struct mail_user *user)
128ab2c52a29068be87e12ab5aebbb8fdc933adfTimo Sirainen{
128ab2c52a29068be87e12ab5aebbb8fdc933adfTimo Sirainen    mail_namespaces_deinit(&user->namespaces);
128ab2c52a29068be87e12ab5aebbb8fdc933adfTimo Sirainen    if (user->mountpoints != NULL)
128ab2c52a29068be87e12ab5aebbb8fdc933adfTimo Sirainen        mountpoint_list_deinit(&user->mountpoints);
128ab2c52a29068be87e12ab5aebbb8fdc933adfTimo Sirainen}
128ab2c52a29068be87e12ab5aebbb8fdc933adfTimo Sirainen
3f442e48e5708f2f80cc937cd722c56a4fbd1c70Timo Sirainenstruct mail_user *mail_user_alloc(const char *username,
128ab2c52a29068be87e12ab5aebbb8fdc933adfTimo Sirainen                  const struct setting_parser_info *set_info,
128ab2c52a29068be87e12ab5aebbb8fdc933adfTimo Sirainen                  const struct mail_user_settings *set)
128ab2c52a29068be87e12ab5aebbb8fdc933adfTimo Sirainen{
4ded3d18fa391ae5908f9834f1390cf55e8c99d5Timo Sirainen    struct mail_user *user;
4ded3d18fa391ae5908f9834f1390cf55e8c99d5Timo Sirainen    const char *error;
4ded3d18fa391ae5908f9834f1390cf55e8c99d5Timo Sirainen    pool_t pool;
128ab2c52a29068be87e12ab5aebbb8fdc933adfTimo Sirainen
128ab2c52a29068be87e12ab5aebbb8fdc933adfTimo Sirainen    i_assert(username != NULL);
128ab2c52a29068be87e12ab5aebbb8fdc933adfTimo Sirainen    i_assert(*username != '\0');
128ab2c52a29068be87e12ab5aebbb8fdc933adfTimo Sirainen
ba153863e55d75a7c2f28c9c010a905b8887b62bTimo Sirainen    pool = pool_alloconly_create("mail user", 16*1024);
b3a069922c8150a1cb14ec7683444f60dee98b55Timo Sirainen    user = p_new(pool, struct mail_user, 1);
3f442e48e5708f2f80cc937cd722c56a4fbd1c70Timo Sirainen    user->pool = pool;
128ab2c52a29068be87e12ab5aebbb8fdc933adfTimo Sirainen    user->refcount = 1;
128ab2c52a29068be87e12ab5aebbb8fdc933adfTimo Sirainen    user->username = p_strdup(pool, username);
128ab2c52a29068be87e12ab5aebbb8fdc933adfTimo Sirainen    user->set_info = set_info;
e156adefc1260d31a145df2f5e9b3c82050d4163Timo Sirainen    user->unexpanded_set = settings_dup(set_info, set, pool);
e156adefc1260d31a145df2f5e9b3c82050d4163Timo Sirainen    user->set = settings_dup(set_info, set, pool);
e156adefc1260d31a145df2f5e9b3c82050d4163Timo Sirainen    user->service = master_service_get_name(master_service);
e156adefc1260d31a145df2f5e9b3c82050d4163Timo Sirainen    user->default_normalizer = uni_utf8_to_decomposed_titlecase;
e156adefc1260d31a145df2f5e9b3c82050d4163Timo Sirainen
e156adefc1260d31a145df2f5e9b3c82050d4163Timo Sirainen    /* check settings so that the duplicated structure will again
e156adefc1260d31a145df2f5e9b3c82050d4163Timo Sirainen       contain the parsed fields */
e156adefc1260d31a145df2f5e9b3c82050d4163Timo Sirainen    if (!settings_check(set_info, pool, user->set, &error))
7b9f0c6aba07358e5520dc60c058126a4cae4056Timo Sirainen        i_panic("Settings check unexpectedly failed: %s", error);
7b9f0c6aba07358e5520dc60c058126a4cae4056Timo Sirainen
7b9f0c6aba07358e5520dc60c058126a4cae4056Timo Sirainen    user->v.deinit = mail_user_deinit_base;
7b9f0c6aba07358e5520dc60c058126a4cae4056Timo Sirainen    p_array_init(&user->module_contexts, user->pool, 5);
128ab2c52a29068be87e12ab5aebbb8fdc933adfTimo Sirainen    return user;
4307c886579381dbb1897ea1388ae6978c96f560Timo Sirainen}
e156adefc1260d31a145df2f5e9b3c82050d4163Timo Sirainen
e156adefc1260d31a145df2f5e9b3c82050d4163Timo Sirainenstatic int
128ab2c52a29068be87e12ab5aebbb8fdc933adfTimo Sirainenmail_user_expand_plugins_envs(struct mail_user *user, const char **error_r)
128ab2c52a29068be87e12ab5aebbb8fdc933adfTimo Sirainen{
128ab2c52a29068be87e12ab5aebbb8fdc933adfTimo Sirainen    const char **envs, *home;
128ab2c52a29068be87e12ab5aebbb8fdc933adfTimo Sirainen    string_t *str;
e156adefc1260d31a145df2f5e9b3c82050d4163Timo Sirainen    unsigned int i, count;
e156adefc1260d31a145df2f5e9b3c82050d4163Timo Sirainen
e156adefc1260d31a145df2f5e9b3c82050d4163Timo Sirainen    if (!array_is_created(&user->set->plugin_envs))
e156adefc1260d31a145df2f5e9b3c82050d4163Timo Sirainen        return 0;
e156adefc1260d31a145df2f5e9b3c82050d4163Timo Sirainen
e156adefc1260d31a145df2f5e9b3c82050d4163Timo Sirainen    str = t_str_new(256);
e156adefc1260d31a145df2f5e9b3c82050d4163Timo Sirainen    envs = array_get_modifiable(&user->set->plugin_envs, &count);
e156adefc1260d31a145df2f5e9b3c82050d4163Timo Sirainen    i_assert((count % 2) == 0);
e156adefc1260d31a145df2f5e9b3c82050d4163Timo Sirainen    for (i = 0; i < count; i += 2) {
e156adefc1260d31a145df2f5e9b3c82050d4163Timo Sirainen        if (user->_home == NULL &&
e156adefc1260d31a145df2f5e9b3c82050d4163Timo Sirainen            var_has_key(envs[i+1], 'h', "home") &&
128ab2c52a29068be87e12ab5aebbb8fdc933adfTimo Sirainen            mail_user_get_home(user, &home) <= 0) {
128ab2c52a29068be87e12ab5aebbb8fdc933adfTimo Sirainen            *error_r = t_strdup_printf(
128ab2c52a29068be87e12ab5aebbb8fdc933adfTimo Sirainen                "userdb didn't return a home directory, "
128ab2c52a29068be87e12ab5aebbb8fdc933adfTimo Sirainen                "but plugin setting %s used it (%%h): %s",
128ab2c52a29068be87e12ab5aebbb8fdc933adfTimo Sirainen                envs[i], envs[i+1]);
e156adefc1260d31a145df2f5e9b3c82050d4163Timo Sirainen            return -1;
e156adefc1260d31a145df2f5e9b3c82050d4163Timo Sirainen        }
e156adefc1260d31a145df2f5e9b3c82050d4163Timo Sirainen        str_truncate(str, 0);
e156adefc1260d31a145df2f5e9b3c82050d4163Timo Sirainen        var_expand(str, envs[i+1], mail_user_var_expand_table(user));
e156adefc1260d31a145df2f5e9b3c82050d4163Timo Sirainen        envs[i+1] = p_strdup(user->pool, str_c(str));
e156adefc1260d31a145df2f5e9b3c82050d4163Timo Sirainen    }
e156adefc1260d31a145df2f5e9b3c82050d4163Timo Sirainen    return 0;
}

int mail_user_init(struct mail_user *user, const char **error_r)
{
    const struct mail_storage_settings *mail_set;
    const char *home, *key, *value;
    bool need_home_dir;

    need_home_dir = user->_home == NULL &&
        settings_vars_have_key(user->set_info, user->set,
                       'h', "home", &key, &value);

    /* expand mail_home setting before calling mail_user_get_home() */
    settings_var_expand(user->set_info, user->set,
                user->pool, mail_user_var_expand_table(user));

    if (need_home_dir && mail_user_get_home(user, &home) <= 0) {
        *error_r = t_strdup_printf(
            "userdb didn't return a home directory, "
            "but %s used it (%%h): %s", key, value);
        return -1;
    }

    if (mail_user_expand_plugins_envs(user, error_r) < 0)
        return -1;

    mail_set = mail_user_set_get_storage_set(user);
    user->mail_debug = mail_set->mail_debug;

    user->initialized = TRUE;
    hook_mail_user_created(user);

    if (user->error != NULL) {
        *error_r = t_strdup(user->error);
        return -1;
    }
    return 0;
}

void mail_user_ref(struct mail_user *user)
{
    i_assert(user->refcount > 0);

    user->refcount++;
}

void mail_user_unref(struct mail_user **_user)
{
    struct mail_user *user = *_user;

    i_assert(user->refcount > 0);

    *_user = NULL;
    if (user->refcount > 1) {
        user->refcount--;
        return;
    }

    /* call deinit() with refcount=1, otherwise we may assert-crash in
       mail_user_ref() that is called by some deinit() handler. */
    user->v.deinit(user);
    i_assert(user->refcount == 1);
    pool_unref(&user->pool);
}

struct mail_user *mail_user_find(struct mail_user *user, const char *name)
{
    struct mail_namespace *ns;

    for (ns = user->namespaces; ns != NULL; ns = ns->next) {
        if (ns->owner != NULL && strcmp(ns->owner->username, name) == 0)
            return ns->owner;
    }
    return NULL;
}

void mail_user_set_vars(struct mail_user *user, const char *service,
            const struct ip_addr *local_ip,
            const struct ip_addr *remote_ip)
{
    i_assert(service != NULL);

    user->service = p_strdup(user->pool, service);
    if (local_ip != NULL && local_ip->family != 0) {
        user->local_ip = p_new(user->pool, struct ip_addr, 1);
        *user->local_ip = *local_ip;
    }
    if (remote_ip != NULL && remote_ip->family != 0) {
        user->remote_ip = p_new(user->pool, struct ip_addr, 1);
        *user->remote_ip = *remote_ip;
    }
}

const struct var_expand_table *
mail_user_var_expand_table(struct mail_user *user)
{
    static struct var_expand_table static_tab[] = {
        { 'u', NULL, "user" },
        { 'n', NULL, "username" },
        { 'd', NULL, "domain" },
        { 's', NULL, "service" },
        { 'h', NULL, "home" },
        { 'l', NULL, "lip" },
        { 'r', NULL, "rip" },
        { 'p', NULL, "pid" },
        { 'i', NULL, "uid" },
        { '\0', NULL, "gid" },
        { '\0', NULL, NULL }
    };
    struct var_expand_table *tab;

    /* use a cached table, unless home directory has been set afterwards */
    if (user->var_expand_table != NULL &&
        user->var_expand_table[4].value == user->_home)
        return user->var_expand_table;

    tab = p_malloc(user->pool, sizeof(static_tab));
    memcpy(tab, static_tab, sizeof(static_tab));

    tab[0].value = user->username;
    tab[1].value = p_strdup(user->pool, t_strcut(user->username, '@'));
    tab[2].value = strchr(user->username, '@');
    if (tab[2].value != NULL) tab[2].value++;
    tab[3].value = user->service;
    tab[4].value = user->_home; /* don't look it up unless we need it */
    tab[5].value = user->local_ip == NULL ? NULL :
        p_strdup(user->pool, net_ip2addr(user->local_ip));
    tab[6].value = user->remote_ip == NULL ? NULL :
        p_strdup(user->pool, net_ip2addr(user->remote_ip));
    tab[7].value = my_pid;
    tab[8].value = p_strdup(user->pool, dec2str(user->uid));
    tab[9].value = p_strdup(user->pool, dec2str(user->gid));

    user->var_expand_table = tab;
    return user->var_expand_table;
}

void mail_user_set_home(struct mail_user *user, const char *home)
{
    user->_home = p_strdup(user->pool, home);
    user->home_looked_up = TRUE;
}

void mail_user_add_namespace(struct mail_user *user,
                 struct mail_namespace **namespaces)
{
    struct mail_namespace **tmp, *next, *ns = *namespaces;

    for (; ns != NULL; ns = next) {
        next = ns->next;

        tmp = &user->namespaces;
        for (; *tmp != NULL; tmp = &(*tmp)->next) {
            if (strlen(ns->prefix) < strlen((*tmp)->prefix))
                break;
        }
        ns->next = *tmp;
        *tmp = ns;
    }
    *namespaces = user->namespaces;
}

void mail_user_drop_useless_namespaces(struct mail_user *user)
{
    struct mail_namespace *ns, *next;

    for (ns = user->namespaces; ns != NULL; ns = next) {
        next = ns->next;

        if ((ns->flags & NAMESPACE_FLAG_USABLE) == 0 &&
            (ns->flags & NAMESPACE_FLAG_AUTOCREATED) != 0)
            mail_namespace_destroy(ns);
    }
}

const char *mail_user_home_expand(struct mail_user *user, const char *path)
{
    (void)mail_user_try_home_expand(user, &path);
    return path;
}

static int mail_user_userdb_lookup_home(struct mail_user *user)
{
    struct auth_user_info info;
    struct auth_user_reply reply;
    pool_t userdb_pool;
    const char *username, *const *fields;
    int ret;

    i_assert(!user->home_looked_up);

    memset(&info, 0, sizeof(info));
    info.service = user->service;
    if (user->local_ip != NULL)
        info.local_ip = *user->local_ip;
    if (user->remote_ip != NULL)
        info.remote_ip = *user->remote_ip;

    if (mail_user_auth_master_conn == NULL)
        return 0;

    userdb_pool = pool_alloconly_create("userdb lookup", 2048);
    ret = auth_master_user_lookup(mail_user_auth_master_conn,
                      user->username, &info, userdb_pool,
                      &username, &fields);
    if (ret > 0) {
        auth_user_fields_parse(fields, userdb_pool, &reply);
        user->_home = p_strdup(user->pool, reply.home);
    }
    pool_unref(&userdb_pool);
    return ret;
}

int mail_user_get_home(struct mail_user *user, const char **home_r)
{
    int ret;

    if (user->home_looked_up) {
        *home_r = user->_home;
        return user->_home != NULL ? 1 : 0;
    }

    ret = mail_user_userdb_lookup_home(user);
    if (ret < 0)
        return -1;

    if (ret > 0 && user->_home == NULL && *user->set->mail_home != '\0') {
        /* no home in userdb, fallback to mail_home setting */
        user->_home = user->set->mail_home;
    }
    user->home_looked_up = TRUE;

    *home_r = user->_home;
    return user->_home != NULL ? 1 : 0;
}

bool mail_user_is_plugin_loaded(struct mail_user *user, struct module *module)
{
    const char *const *plugins;
    bool ret;

    T_BEGIN {
        plugins = t_strsplit_spaces(user->set->mail_plugins, ", ");
        ret = str_array_find(plugins, module_get_plugin_name(module));
    } T_END;
    return ret;
}

const char *mail_user_plugin_getenv(struct mail_user *user, const char *name)
{
    return mail_user_set_plugin_getenv(user->set, name);
}

const char *mail_user_set_plugin_getenv(const struct mail_user_settings *set,
                    const char *name)
{
    const char *const *envs;
    unsigned int i, count;

    if (!array_is_created(&set->plugin_envs))
        return NULL;

    envs = array_get(&set->plugin_envs, &count);
    for (i = 0; i < count; i += 2) {
        if (strcmp(envs[i], name) == 0)
            return envs[i+1];
    }
    return NULL;
}

int mail_user_try_home_expand(struct mail_user *user, const char **pathp)
{
    const char *home, *path = *pathp;

    if (*path != '~') {
        /* no need to expand home */
        return 0;
    }

    if (mail_user_get_home(user, &home) <= 0)
        return -1;

    path = home_expand_tilde(path, home);
    if (path == NULL)
        return -1;

    *pathp = path;
    return 0;
}

void mail_user_set_get_temp_prefix(string_t *dest,
                   const struct mail_user_settings *set)
{
    str_append(dest, set->mail_temp_dir);
    str_append(dest, "/dovecot.");
    str_append(dest, master_service_get_name(master_service));
    str_append_c(dest, '.');
}

const char *mail_user_get_anvil_userip_ident(struct mail_user *user)
{
    if (user->remote_ip == NULL)
        return NULL;
    return t_strconcat(net_ip2addr(user->remote_ip), "/",
               str_tabescape(user->username), NULL);
}

bool mail_user_is_path_mounted(struct mail_user *user, const char *path,
                   const char **error_r)
{
    struct mountpoint_list_rec *rec;
    const char *mounts_path;

    *error_r = NULL;

    if (user->mountpoints == NULL) {
        mounts_path = t_strdup_printf("%s/"MOUNTPOINT_LIST_FNAME,
                          user->set->base_dir);
        user->mountpoints = mountpoint_list_init_readonly(mounts_path);
    } else {
        (void)mountpoint_list_refresh(user->mountpoints);
    }
    rec = mountpoint_list_find(user->mountpoints, path);
    if (rec == NULL || strcmp(rec->state, MOUNTPOINT_STATE_IGNORE) == 0) {
        /* we don't have any knowledge of this path's mountpoint.
           assume it's fine. */
        return TRUE;
    }
    /* record exists for this mountpoint. see if it's mounted */
    if (mountpoint_list_update_mounted(user->mountpoints) == 0 &&
        !rec->mounted) {
        *error_r = t_strdup_printf("Mountpoint %s isn't mounted. "
            "Mount it or remove it with doveadm mount remove",
            rec->mount_path);
        return FALSE;
    }
    return TRUE;
}

static void
mail_user_try_load_class_plugin(struct mail_user *user, const char *name)
{
    struct module_dir_load_settings mod_set;
    struct module *module;
    unsigned int name_len = strlen(name);

    memset(&mod_set, 0, sizeof(mod_set));
    mod_set.abi_version = DOVECOT_ABI_VERSION;
    mod_set.binary_name = master_service_get_name(master_service);
    mod_set.setting_name = "<built-in storage lookup>";
    mod_set.require_init_funcs = TRUE;
    mod_set.debug = user->mail_debug;

    mail_storage_service_modules =
        module_dir_load_missing(mail_storage_service_modules,
                    user->set->mail_plugin_dir,
                    name, &mod_set);
    /* initialize the module (and only this module!) immediately so that
       the class gets registered */
    for (module = mail_storage_service_modules; module != NULL; module = module->next) {
        if (strncmp(module->name, name, name_len) == 0 &&
            strcmp(module->name + name_len, "_plugin") == 0) {
            if (!module->initialized) {
                module->initialized = TRUE;
                module->init(module);
            }
            break;
        }
    }
}

struct mail_storage *
mail_user_get_storage_class(struct mail_user *user, const char *name)
{
    struct mail_storage *storage;

    storage = mail_storage_find_class(name);
    if (storage == NULL || storage->v.alloc != NULL)
        return storage;

    /* it's implemented by a plugin. load it and check again. */
    mail_user_try_load_class_plugin(user, name);

    storage = mail_storage_find_class(name);
    if (storage != NULL && storage->v.alloc == NULL) {
        i_error("Storage driver '%s' exists as a stub, "
            "but its plugin couldn't be loaded", name);
        return NULL;
    }
    return storage;
}