login-settings.c revision efe78d3ba24fc866af1c79b9223dc0809ba26cad
02c335c23bf5fa225a467c19f2c063fb0dc7b8c3Timo Sirainen/* Copyright (c) 2005-2016 Dovecot authors, see the included COPYING file */
a64adf62fa33f2463a86f990217b0c9078531a40Timo Sirainen
46552a931924c2d743f045e95b08c3ce6beda91aTimo Sirainen#include "login-common.h"
ed4cdfe5847a6063d5a4684a6a47b17e943922b5Timo Sirainen#include "hostpid.h"
ed4cdfe5847a6063d5a4684a6a47b17e943922b5Timo Sirainen#include "var-expand.h"
a64adf62fa33f2463a86f990217b0c9078531a40Timo Sirainen#include "settings-parser.h"
5d03d9f439e41c90215a3c938ffebe4c2a8ae257Timo Sirainen#include "master-service.h"
d176f84ce5ca2073f4dfbafb457b9c74f6bf0d76Timo Sirainen#include "master-service-settings.h"
f29756821a4c6b12b73e4a2a3e1c230117a43773Timo Sirainen#include "master-service-ssl-settings.h"
5d03d9f439e41c90215a3c938ffebe4c2a8ae257Timo Sirainen#include "master-service-settings-cache.h"
a64adf62fa33f2463a86f990217b0c9078531a40Timo Sirainen#include "login-settings.h"
a64adf62fa33f2463a86f990217b0c9078531a40Timo Sirainen
a64adf62fa33f2463a86f990217b0c9078531a40Timo Sirainen#include <stddef.h>
a64adf62fa33f2463a86f990217b0c9078531a40Timo Sirainen#include <unistd.h>
a64adf62fa33f2463a86f990217b0c9078531a40Timo Sirainen
d63b4241643b6014d49ff356f14e0f3ee43068a8Timo Sirainenstatic bool login_settings_check(void *_set, pool_t pool, const char **error_r);
b215a8a123623782554a83f3025ef4e771bd8f01Timo Sirainen
a64adf62fa33f2463a86f990217b0c9078531a40Timo Sirainen#undef DEF
a64adf62fa33f2463a86f990217b0c9078531a40Timo Sirainen#define DEF(type, name) \
a64adf62fa33f2463a86f990217b0c9078531a40Timo Sirainen { type, #name, offsetof(struct login_settings, name), NULL }
a64adf62fa33f2463a86f990217b0c9078531a40Timo Sirainen
7744586e3e0fd60158abfbb03a233d3bd8d6c48bTimo Sirainenstatic const struct setting_define login_setting_defines[] = {
a64adf62fa33f2463a86f990217b0c9078531a40Timo Sirainen DEF(SET_STR, login_trusted_networks),
c51644e9e04effbbc9c415cadcfbcb4d9465855cTimo Sirainen DEF(SET_STR, login_source_ips),
ed4cdfe5847a6063d5a4684a6a47b17e943922b5Timo Sirainen DEF(SET_STR_VARS, login_greeting),
a64adf62fa33f2463a86f990217b0c9078531a40Timo Sirainen DEF(SET_STR, login_log_format_elements),
a64adf62fa33f2463a86f990217b0c9078531a40Timo Sirainen DEF(SET_STR, login_log_format),
79977d368df2efc3f3dc0bbb260748b076538103Timo Sirainen DEF(SET_STR, login_access_sockets),
4819488364b20ee82a9d60177d15c79d0b5abbe0Timo Sirainen DEF(SET_STR, login_plugin_dir),
4819488364b20ee82a9d60177d15c79d0b5abbe0Timo Sirainen DEF(SET_STR, login_plugins),
c9d685897f9e7f0d5e27c00d4b03281d6049ccd1Timo Sirainen DEF(SET_TIME, login_proxy_max_disconnect_delay),
5733207dc3ec10e6e5a6e0a8b30fbd1b061062b9Timo Sirainen DEF(SET_STR, director_username_hash),
a64adf62fa33f2463a86f990217b0c9078531a40Timo Sirainen
f45da0b456f0f1540c221f9fdc7d8f7b93400782Timo Sirainen DEF(SET_STR, ssl_client_cert),
f45da0b456f0f1540c221f9fdc7d8f7b93400782Timo Sirainen DEF(SET_STR, ssl_client_key),
c77b85e6017a3f15943fd1c47340daefd87b1993Timo Sirainen DEF(SET_BOOL, ssl_require_crl),
434abef12f61881a5cfa28d27193d0854a9639a0Timo Sirainen DEF(SET_BOOL, auth_ssl_require_client_cert),
434abef12f61881a5cfa28d27193d0854a9639a0Timo Sirainen DEF(SET_BOOL, auth_ssl_username_from_cert),
a64adf62fa33f2463a86f990217b0c9078531a40Timo Sirainen
a64adf62fa33f2463a86f990217b0c9078531a40Timo Sirainen DEF(SET_BOOL, disable_plaintext_auth),
b11269887905780bc8cb7762bbb157aa59961cacTimo Sirainen DEF(SET_BOOL, auth_verbose),
a64adf62fa33f2463a86f990217b0c9078531a40Timo Sirainen DEF(SET_BOOL, auth_debug),
a64adf62fa33f2463a86f990217b0c9078531a40Timo Sirainen DEF(SET_BOOL, verbose_proctitle),
a64adf62fa33f2463a86f990217b0c9078531a40Timo Sirainen
6c2ce1d5bf17b21e804a079eb0f973b7ab83e0d8Timo Sirainen DEF(SET_UINT, mail_max_userip_connections),
a64adf62fa33f2463a86f990217b0c9078531a40Timo Sirainen
a64adf62fa33f2463a86f990217b0c9078531a40Timo Sirainen SETTING_DEFINE_LIST_END
a64adf62fa33f2463a86f990217b0c9078531a40Timo Sirainen};
a64adf62fa33f2463a86f990217b0c9078531a40Timo Sirainen
7744586e3e0fd60158abfbb03a233d3bd8d6c48bTimo Sirainenstatic const struct login_settings login_default_settings = {
7bafda1813454621e03615e83d55bccfa7cc56bdTimo Sirainen .login_trusted_networks = "",
c51644e9e04effbbc9c415cadcfbcb4d9465855cTimo Sirainen .login_source_ips = "",
7bafda1813454621e03615e83d55bccfa7cc56bdTimo Sirainen .login_greeting = PACKAGE_NAME" ready.",
f016dec9837e6a41867708e4b89ca5308dedab05Timo Sirainen .login_log_format_elements = "user=<%u> method=%m rip=%r lip=%l mpid=%e %c session=<%{session}>",
7bafda1813454621e03615e83d55bccfa7cc56bdTimo Sirainen .login_log_format = "%$: %s",
79977d368df2efc3f3dc0bbb260748b076538103Timo Sirainen .login_access_sockets = "",
4819488364b20ee82a9d60177d15c79d0b5abbe0Timo Sirainen .login_plugin_dir = MODULEDIR"/login",
4819488364b20ee82a9d60177d15c79d0b5abbe0Timo Sirainen .login_plugins = "",
c9d685897f9e7f0d5e27c00d4b03281d6049ccd1Timo Sirainen .login_proxy_max_disconnect_delay = 0,
5733207dc3ec10e6e5a6e0a8b30fbd1b061062b9Timo Sirainen .director_username_hash = "%u",
7bafda1813454621e03615e83d55bccfa7cc56bdTimo Sirainen
f45da0b456f0f1540c221f9fdc7d8f7b93400782Timo Sirainen .ssl_client_cert = "",
f45da0b456f0f1540c221f9fdc7d8f7b93400782Timo Sirainen .ssl_client_key = "",
c77b85e6017a3f15943fd1c47340daefd87b1993Timo Sirainen .ssl_require_crl = TRUE,
434abef12f61881a5cfa28d27193d0854a9639a0Timo Sirainen .auth_ssl_require_client_cert = FALSE,
434abef12f61881a5cfa28d27193d0854a9639a0Timo Sirainen .auth_ssl_username_from_cert = FALSE,
7bafda1813454621e03615e83d55bccfa7cc56bdTimo Sirainen
7bafda1813454621e03615e83d55bccfa7cc56bdTimo Sirainen .disable_plaintext_auth = TRUE,
b11269887905780bc8cb7762bbb157aa59961cacTimo Sirainen .auth_verbose = FALSE,
7bafda1813454621e03615e83d55bccfa7cc56bdTimo Sirainen .auth_debug = FALSE,
7bafda1813454621e03615e83d55bccfa7cc56bdTimo Sirainen .verbose_proctitle = FALSE,
7bafda1813454621e03615e83d55bccfa7cc56bdTimo Sirainen
7bafda1813454621e03615e83d55bccfa7cc56bdTimo Sirainen .mail_max_userip_connections = 10
a64adf62fa33f2463a86f990217b0c9078531a40Timo Sirainen};
a64adf62fa33f2463a86f990217b0c9078531a40Timo Sirainen
7744586e3e0fd60158abfbb03a233d3bd8d6c48bTimo Sirainenconst struct setting_parser_info login_setting_parser_info = {
7bafda1813454621e03615e83d55bccfa7cc56bdTimo Sirainen .module_name = "login",
7bafda1813454621e03615e83d55bccfa7cc56bdTimo Sirainen .defines = login_setting_defines,
7bafda1813454621e03615e83d55bccfa7cc56bdTimo Sirainen .defaults = &login_default_settings,
a64adf62fa33f2463a86f990217b0c9078531a40Timo Sirainen
7bafda1813454621e03615e83d55bccfa7cc56bdTimo Sirainen .type_offset = (size_t)-1,
7bafda1813454621e03615e83d55bccfa7cc56bdTimo Sirainen .struct_size = sizeof(struct login_settings),
383d0e8c24451468d6bea17e4b55d74de744abe6Timo Sirainen
7bafda1813454621e03615e83d55bccfa7cc56bdTimo Sirainen .parent_offset = (size_t)-1,
383d0e8c24451468d6bea17e4b55d74de744abe6Timo Sirainen
7bafda1813454621e03615e83d55bccfa7cc56bdTimo Sirainen .check_func = login_settings_check
a64adf62fa33f2463a86f990217b0c9078531a40Timo Sirainen};
a64adf62fa33f2463a86f990217b0c9078531a40Timo Sirainen
f059a046515f4b2b15a6c2a10a6f12f6166e39a5Timo Sirainenstatic const struct setting_parser_info *default_login_set_roots[] = {
7ceee001c11865a88a311c50c4430867b2d32ce6Timo Sirainen &login_setting_parser_info,
7ceee001c11865a88a311c50c4430867b2d32ce6Timo Sirainen NULL
7ceee001c11865a88a311c50c4430867b2d32ce6Timo Sirainen};
7ceee001c11865a88a311c50c4430867b2d32ce6Timo Sirainen
f059a046515f4b2b15a6c2a10a6f12f6166e39a5Timo Sirainenconst struct setting_parser_info **login_set_roots = default_login_set_roots;
f059a046515f4b2b15a6c2a10a6f12f6166e39a5Timo Sirainen
5d03d9f439e41c90215a3c938ffebe4c2a8ae257Timo Sirainenstatic struct master_service_settings_cache *set_cache;
5d03d9f439e41c90215a3c938ffebe4c2a8ae257Timo Sirainen
b215a8a123623782554a83f3025ef4e771bd8f01Timo Sirainen/* <settings checks> */
f29756821a4c6b12b73e4a2a3e1c230117a43773Timo Sirainenstatic bool login_settings_check(void *_set, pool_t pool,
f29756821a4c6b12b73e4a2a3e1c230117a43773Timo Sirainen const char **error_r ATTR_UNUSED)
a64adf62fa33f2463a86f990217b0c9078531a40Timo Sirainen{
b215a8a123623782554a83f3025ef4e771bd8f01Timo Sirainen struct login_settings *set = _set;
a64adf62fa33f2463a86f990217b0c9078531a40Timo Sirainen
a64adf62fa33f2463a86f990217b0c9078531a40Timo Sirainen set->log_format_elements_split =
97db4761382024093f441e4bc78ba8b6a056504dTimo Sirainen p_strsplit(pool, set->login_log_format_elements, " ");
a64adf62fa33f2463a86f990217b0c9078531a40Timo Sirainen
73f70e35b789fb3647c40755ed679e61c7dcb852Timo Sirainen if (set->auth_debug_passwords)
73f70e35b789fb3647c40755ed679e61c7dcb852Timo Sirainen set->auth_debug = TRUE;
b11269887905780bc8cb7762bbb157aa59961cacTimo Sirainen if (set->auth_debug)
b11269887905780bc8cb7762bbb157aa59961cacTimo Sirainen set->auth_verbose = TRUE;
b215a8a123623782554a83f3025ef4e771bd8f01Timo Sirainen return TRUE;
a64adf62fa33f2463a86f990217b0c9078531a40Timo Sirainen}
b215a8a123623782554a83f3025ef4e771bd8f01Timo Sirainen/* </settings checks> */
a64adf62fa33f2463a86f990217b0c9078531a40Timo Sirainen
ed4cdfe5847a6063d5a4684a6a47b17e943922b5Timo Sirainenstatic const struct var_expand_table *
ed4cdfe5847a6063d5a4684a6a47b17e943922b5Timo Sirainenlogin_set_var_expand_table(const struct master_service_settings_input *input)
ed4cdfe5847a6063d5a4684a6a47b17e943922b5Timo Sirainen{
acfda38b75d0f0e899ef692fef01593bd56ed85eTimo Sirainen const struct var_expand_table stack_tab[] = {
acfda38b75d0f0e899ef692fef01593bd56ed85eTimo Sirainen { 'l', net_ip2addr(&input->local_ip), "lip" },
acfda38b75d0f0e899ef692fef01593bd56ed85eTimo Sirainen { 'r', net_ip2addr(&input->remote_ip), "rip" },
acfda38b75d0f0e899ef692fef01593bd56ed85eTimo Sirainen { 'p', my_pid, "pid" },
acfda38b75d0f0e899ef692fef01593bd56ed85eTimo Sirainen { 's', input->service, "service" },
acfda38b75d0f0e899ef692fef01593bd56ed85eTimo Sirainen { '\0', input->local_name, "local_name" },
ed4cdfe5847a6063d5a4684a6a47b17e943922b5Timo Sirainen { '\0', NULL, NULL }
ed4cdfe5847a6063d5a4684a6a47b17e943922b5Timo Sirainen };
ed4cdfe5847a6063d5a4684a6a47b17e943922b5Timo Sirainen struct var_expand_table *tab;
ed4cdfe5847a6063d5a4684a6a47b17e943922b5Timo Sirainen
acfda38b75d0f0e899ef692fef01593bd56ed85eTimo Sirainen tab = t_malloc_no0(sizeof(stack_tab));
acfda38b75d0f0e899ef692fef01593bd56ed85eTimo Sirainen memcpy(tab, stack_tab, sizeof(stack_tab));
ed4cdfe5847a6063d5a4684a6a47b17e943922b5Timo Sirainen return tab;
ed4cdfe5847a6063d5a4684a6a47b17e943922b5Timo Sirainen}
ed4cdfe5847a6063d5a4684a6a47b17e943922b5Timo Sirainen
f29756821a4c6b12b73e4a2a3e1c230117a43773Timo Sirainenstatic void *
f29756821a4c6b12b73e4a2a3e1c230117a43773Timo Sirainenlogin_setting_dup(pool_t pool, const struct setting_parser_info *info,
f29756821a4c6b12b73e4a2a3e1c230117a43773Timo Sirainen const void *src_set)
f29756821a4c6b12b73e4a2a3e1c230117a43773Timo Sirainen{
f29756821a4c6b12b73e4a2a3e1c230117a43773Timo Sirainen const char *error;
f29756821a4c6b12b73e4a2a3e1c230117a43773Timo Sirainen void *dest;
f29756821a4c6b12b73e4a2a3e1c230117a43773Timo Sirainen
f29756821a4c6b12b73e4a2a3e1c230117a43773Timo Sirainen dest = settings_dup(info, src_set, pool);
f29756821a4c6b12b73e4a2a3e1c230117a43773Timo Sirainen if (!settings_check(info, pool, dest, &error)) {
f29756821a4c6b12b73e4a2a3e1c230117a43773Timo Sirainen const char *name = info->module_name;
f29756821a4c6b12b73e4a2a3e1c230117a43773Timo Sirainen
f29756821a4c6b12b73e4a2a3e1c230117a43773Timo Sirainen i_fatal("settings_check(%s) failed: %s",
f29756821a4c6b12b73e4a2a3e1c230117a43773Timo Sirainen name != NULL ? name : "unknown", error);
f29756821a4c6b12b73e4a2a3e1c230117a43773Timo Sirainen }
f29756821a4c6b12b73e4a2a3e1c230117a43773Timo Sirainen return dest;
f29756821a4c6b12b73e4a2a3e1c230117a43773Timo Sirainen}
f29756821a4c6b12b73e4a2a3e1c230117a43773Timo Sirainen
97db4761382024093f441e4bc78ba8b6a056504dTimo Sirainenstruct login_settings *
5d03d9f439e41c90215a3c938ffebe4c2a8ae257Timo Sirainenlogin_settings_read(pool_t pool,
97db4761382024093f441e4bc78ba8b6a056504dTimo Sirainen const struct ip_addr *local_ip,
f059a046515f4b2b15a6c2a10a6f12f6166e39a5Timo Sirainen const struct ip_addr *remote_ip,
41942258112e4131de96b6a4399c1a8ac83a23cbTimo Sirainen const char *local_name,
f29756821a4c6b12b73e4a2a3e1c230117a43773Timo Sirainen const struct master_service_ssl_settings **ssl_set_r,
f059a046515f4b2b15a6c2a10a6f12f6166e39a5Timo Sirainen void ***other_settings_r)
a64adf62fa33f2463a86f990217b0c9078531a40Timo Sirainen{
1358e2c58ce29231485a5cfa454756d429ad3d2cTimo Sirainen struct master_service_settings_input input;
b215a8a123623782554a83f3025ef4e771bd8f01Timo Sirainen const char *error;
5d03d9f439e41c90215a3c938ffebe4c2a8ae257Timo Sirainen const struct setting_parser_context *parser;
5d03d9f439e41c90215a3c938ffebe4c2a8ae257Timo Sirainen void *const *cache_sets;
d176f84ce5ca2073f4dfbafb457b9c74f6bf0d76Timo Sirainen void **sets;
5d03d9f439e41c90215a3c938ffebe4c2a8ae257Timo Sirainen unsigned int i, count;
a64adf62fa33f2463a86f990217b0c9078531a40Timo Sirainen
efe78d3ba24fc866af1c79b9223dc0809ba26cadStephan Bosch i_zero(&input);
7ceee001c11865a88a311c50c4430867b2d32ce6Timo Sirainen input.roots = login_set_roots;
5a250816ffc4cc5db203f9410ea99b6601c7b91aTimo Sirainen input.module = login_binary->process_name;
5a250816ffc4cc5db203f9410ea99b6601c7b91aTimo Sirainen input.service = login_binary->protocol;
41942258112e4131de96b6a4399c1a8ac83a23cbTimo Sirainen input.local_name = local_name;
1358e2c58ce29231485a5cfa454756d429ad3d2cTimo Sirainen
97db4761382024093f441e4bc78ba8b6a056504dTimo Sirainen if (local_ip != NULL)
97db4761382024093f441e4bc78ba8b6a056504dTimo Sirainen input.local_ip = *local_ip;
97db4761382024093f441e4bc78ba8b6a056504dTimo Sirainen if (remote_ip != NULL)
97db4761382024093f441e4bc78ba8b6a056504dTimo Sirainen input.remote_ip = *remote_ip;
97db4761382024093f441e4bc78ba8b6a056504dTimo Sirainen
5d03d9f439e41c90215a3c938ffebe4c2a8ae257Timo Sirainen if (set_cache == NULL) {
5d03d9f439e41c90215a3c938ffebe4c2a8ae257Timo Sirainen set_cache = master_service_settings_cache_init(master_service,
5d03d9f439e41c90215a3c938ffebe4c2a8ae257Timo Sirainen input.module,
5d03d9f439e41c90215a3c938ffebe4c2a8ae257Timo Sirainen input.service);
5d03d9f439e41c90215a3c938ffebe4c2a8ae257Timo Sirainen }
5d03d9f439e41c90215a3c938ffebe4c2a8ae257Timo Sirainen
9b78c0d5e13141f4df6c6e483f854e5acb861288Timo Sirainen if (master_service_settings_cache_read(set_cache, &input, NULL,
5d03d9f439e41c90215a3c938ffebe4c2a8ae257Timo Sirainen &parser, &error) < 0)
d176f84ce5ca2073f4dfbafb457b9c74f6bf0d76Timo Sirainen i_fatal("Error reading configuration: %s", error);
b215a8a123623782554a83f3025ef4e771bd8f01Timo Sirainen
32b78da5dfbbf6a06b3dbdc9278c60b55714f9bcTimo Sirainen cache_sets = master_service_settings_parser_get_others(master_service, parser);
9d6307357b77c1006fff39f324d4f536d456b170Timo Sirainen for (count = 0; input.roots[count] != NULL; count++) ;
9d6307357b77c1006fff39f324d4f536d456b170Timo Sirainen i_assert(cache_sets[count] == NULL);
5d03d9f439e41c90215a3c938ffebe4c2a8ae257Timo Sirainen sets = p_new(pool, void *, count + 1);
f29756821a4c6b12b73e4a2a3e1c230117a43773Timo Sirainen for (i = 0; i < count; i++)
f29756821a4c6b12b73e4a2a3e1c230117a43773Timo Sirainen sets[i] = login_setting_dup(pool, input.roots[i], cache_sets[i]);
f059a046515f4b2b15a6c2a10a6f12f6166e39a5Timo Sirainen
0f5dc4da3982053036be65190e44bf28a67b1ca2Timo Sirainen if (settings_var_expand(&login_setting_parser_info, sets[0], pool,
0f5dc4da3982053036be65190e44bf28a67b1ca2Timo Sirainen login_set_var_expand_table(&input), &error) <= 0)
0f5dc4da3982053036be65190e44bf28a67b1ca2Timo Sirainen i_fatal("Failed to expand settings: %s", error);
ed4cdfe5847a6063d5a4684a6a47b17e943922b5Timo Sirainen
f29756821a4c6b12b73e4a2a3e1c230117a43773Timo Sirainen *ssl_set_r =
f29756821a4c6b12b73e4a2a3e1c230117a43773Timo Sirainen login_setting_dup(pool, &master_service_ssl_setting_parser_info,
f29756821a4c6b12b73e4a2a3e1c230117a43773Timo Sirainen settings_parser_get_list(parser)[1]);
f059a046515f4b2b15a6c2a10a6f12f6166e39a5Timo Sirainen *other_settings_r = sets + 1;
f059a046515f4b2b15a6c2a10a6f12f6166e39a5Timo Sirainen return sets[0];
a64adf62fa33f2463a86f990217b0c9078531a40Timo Sirainen}
5d03d9f439e41c90215a3c938ffebe4c2a8ae257Timo Sirainen
5d03d9f439e41c90215a3c938ffebe4c2a8ae257Timo Sirainenvoid login_settings_deinit(void)
5d03d9f439e41c90215a3c938ffebe4c2a8ae257Timo Sirainen{
5d03d9f439e41c90215a3c938ffebe4c2a8ae257Timo Sirainen if (set_cache != NULL)
5d03d9f439e41c90215a3c938ffebe4c2a8ae257Timo Sirainen master_service_settings_cache_deinit(&set_cache);
5d03d9f439e41c90215a3c938ffebe4c2a8ae257Timo Sirainen}