holger krekel
eaff92cebc
don't use filelocks for writing password because there only is a single doveauth process anyway
2024-07-28 11:12:00 +02:00
holger krekel
4f4fd6a90c
log error when a transaction id is not there
2024-07-28 11:12:00 +02:00
holger krekel
da3eb89b67
try debug a CI failure
2024-07-28 11:12:00 +02:00
holger krekel
765f081f6f
refactor password/login-timestamp handling into a User object
2024-07-28 11:12:00 +02:00
holger krekel
5c87d69d46
simplify get_user_maildir
2024-07-28 11:12:00 +02:00
holger krekel
686f32d6b3
implement and test migration from sqlite to storing password in userdir
2024-07-28 11:12:00 +02:00
holger krekel
68a62537e1
merge lastlogin and doveauth logic to use the "password" file for both states
2024-07-28 11:12:00 +02:00
holger krekel
e3ff82544a
shift lookup methods to class for consistency
2024-07-28 11:12:00 +02:00
holger krekel
eddfadaf7f
move passwords to file in user maildir
2024-07-28 11:12:00 +02:00
holger krekel
1b3e2b32f2
only write last-login files for e-mail address directories
2024-07-28 11:12:00 +02:00
holger krekel
353d3bfb3f
introduce last-login proxy
2024-07-28 11:12:00 +02:00
holger krekel
4a8fc84c82
Update chatmaild/src/chatmaild/delete_inactive_users.py
...
Co-authored-by: link2xt <link2xt@testrun.org >
2024-07-28 11:12:00 +02:00
holger krekel
641a6f8d2e
streamline: make Config determine uid/gid/maildir of a user
2024-07-28 11:12:00 +02:00
holger krekel
7f3996ef58
make read/write user data atomic
2024-07-28 11:12:00 +02:00
holger krekel
dd770f7e10
small streamlining
2024-07-28 11:12:00 +02:00
holger krekel
4dbb19db46
delete users from mailboxes_dir
2024-07-28 11:12:00 +02:00
holger krekel
ad151c2cc1
remove last_login
2024-07-28 11:12:00 +02:00
holger krekel
28f357b598
write last login differently
2024-07-28 11:12:00 +02:00
holger krekel
bf0f6e2303
address review comments: renamed test and using socketserver ThreadingUnixStreamServer
2024-07-22 13:51:32 +02:00
holger krekel
35a0f07887
remove startup/socket setup from metadata
2024-07-22 13:51:32 +02:00
holger krekel
52aa7cad06
make doveauth also use generic dictproxy
2024-07-22 13:51:32 +02:00
holger krekel
22d77f4680
splitout base class for dictproxy
2024-07-22 13:51:32 +02:00
holger krekel
46c34bfbea
use class for dispatching lookups
2024-07-22 13:51:32 +02:00
link2xt
052fb64a3d
nginx: use numbers for upstream ports
...
Otherwise nginx fails when user actually tries to connect,
logs have errors such as
`invalid port in upstream "127.0.0.1:imaps"`
and
`invalid port in upstream "127.0.0.1:submissions"`.
2024-07-17 17:13:05 +00:00
link2xt
e8bf051cd0
refactor: use f-string in logging where it is easy
...
% is only interpreted if there are two or more arguments:
<https://docs.python.org/3/library/logging.html#logging.Logger.debug >
So it is safe to pass a single argument with already formatted
string.
2024-07-16 09:13:56 +00:00
holger krekel
d3c29b2f6e
rename chatmail_domain to mail_domain like is used everywhere else
2024-07-16 10:34:08 +02:00
holger krekel
ef7f4965d4
add changelog entry
2024-07-16 10:34:08 +02:00
holger krekel
c593906c26
fix dns zone file comment syntax
2024-07-16 10:34:08 +02:00
holger krekel
27eea671dc
fix pyinfra run to account for new pyinfra release
2024-07-16 10:34:08 +02:00
holger krekel
79a9d2345b
more tests and refinements
2024-07-16 10:34:08 +02:00
holger krekel
c3caddcec9
separate between required and recommended entries
2024-07-16 10:34:08 +02:00
holger krekel
6d90182d2e
add DNS tests, make remote ssh-exec errors show locally, cleanup ssh-bootstrap
2024-07-16 10:34:08 +02:00
holger krekel
ea503a6075
restructure DNS checks
2024-07-16 10:34:08 +02:00
holger krekel
ffe313528e
simplify remote zone-file checking and insist for "dns" subcommand that all records are present
2024-07-16 10:34:08 +02:00
holger krekel
9b5b4c3787
- better debugging for DNS queries
...
- don't try to guess IP addresses but insist on A and AAAA records
- try to allow ipv4 or ipv6 only zones
- move chatmail.zone generation to jinja so we can have conditionals
2024-07-16 10:34:08 +02:00
holger krekel
c5bf3188a4
report back on ip determination -- deal with failure to obtain ip address
2024-07-16 10:34:08 +02:00
holger krekel
c4f46dc499
fix maildata handling after prematurely merging #369
2024-07-13 19:20:06 +02:00
Daniel Kahn Gillmor
c1fd573de2
Add tests for alternate mail subjects
2024-07-13 18:33:42 +02:00
Daniel Kahn Gillmor
c6b083472f
Accept encrypted messages that use hcp_minimal
...
in draft-ietf-lamps-header-protection-22, hcp_minimal recommends
"[...]" as the obscured Subject header. In the pending draft
-23 (hopefully released this week, going into a working group last
call), the same HCP will be renamed to hcp_baseline, but it still
recommends the use of "[...]" for the obscured Subject header.
2024-07-13 18:33:42 +02:00
holger krekel
254fe95394
postfix was hitting the "100 clients" smtp-submission connected limit (DC apps) and switched to stress mode which brings more randomness/relay to smtp-connections. We now allow 5K because it should be fine for the machine.
2024-07-13 17:19:15 +02:00
holger krekel
ac61ac082e
Revert "postfix: fix timeout to 300s on submission ports"
...
This reverts commit 39584c7b7d
2024-07-13 16:13:54 +02:00
link2xt
02df395dab
filtermail: do not inject addresses into fromat string
2024-07-13 11:46:49 +02:00
link2xt
39584c7b7d
postfix: fix timeout to 300s on submission ports
...
Otherwise smtpd reduces it to 10s on "overload".
2024-07-13 11:46:20 +02:00
link2xt
4ebc4f3069
postfix: do not lookup client hostnames
2024-07-13 11:45:54 +02:00
missytake
1eca8aa143
CI: don't let commits in other PRs interrupt CI runs ( #361 )
2024-07-12 12:05:21 +02:00
missytake
9c09d50e8f
acmetool: reload nginx after requesting new cert
2024-07-12 11:07:35 +02:00
link2xt
d73e896e66
Add changelog entry for HTTPS/IMAP/SMTP multiplexing
2024-07-11 10:31:45 +00:00
link2xt
283045dc4a
Multiplex HTTPS, IMAP and SMTP on port 443
...
Services are distinguished based on ALPN.
For example,
openssl s_client -connect example.org:443 -alpn smtp
gives SMTP connection and
openssl s_client -connect example.org:443 -alpn imap
gives IMAP connection.
2024-07-11 10:30:46 +00:00
holger krekel
180cfb3951
get rid of xfailing test
2024-07-11 12:08:33 +02:00
holger krekel
610637da80
don't report on xfail, it's useless
2024-07-11 02:16:08 +02:00
