[dovecot/core] e82511: auth-policy: Do not do policy checks every time

[GitHub]

  Branch: refs/heads/master
  Home:   https://github.com/dovecot/core
  Commit: e82511362eb29f75fd940bb3377589c62fb2984a
      https://github.com/dovecot/core/commit/e82511362eb29f75fd940bb3377589c62fb2984a
  Author: Aki Tuomi <aki.tuomi at dovecot.fi>
  Date:   2016-06-29 (Wed, 29 Jun 2016)

  Changed paths:
    M src/auth/auth-request.c

  Log Message:
  -----------
  auth-policy: Do not do policy checks every time


  Commit: cf91b6b3ac121e59ba8f77f41f962adba4e55920
      https://github.com/dovecot/core/commit/cf91b6b3ac121e59ba8f77f41f962adba4e55920
  Author: Timo Sirainen <timo.sirainen at dovecot.fi>
  Date:   2016-06-29 (Wed, 29 Jun 2016)

  Changed paths:
    M src/lib-storage/index/index-status.c

  Log Message:
  -----------
  lib-storage: Fixed MAILBOX_METADATA_FIRST_SAVE_DATE with mailbox_list_index=no

This also meant that autoexpunging wasn't working then.


  Commit: ced943b0a9b49a5be38516302fe1631c1883deba
      https://github.com/dovecot/core/commit/ced943b0a9b49a5be38516302fe1631c1883deba
  Author: Timo Sirainen <timo.sirainen at dovecot.fi>
  Date:   2016-06-29 (Wed, 29 Jun 2016)

  Changed paths:
    M src/lmtp/client.h
    M src/lmtp/commands.c

  Log Message:
  -----------
  lmtp: If user has rached lmtp_user_concurrency_limit, fail at RCPT TO stage.

Otherwise LMTP client would have to send the entire email body before
getting the failure.


  Commit: 553a131eddb46d97967fd9610408b7f0829eab6f
      https://github.com/dovecot/core/commit/553a131eddb46d97967fd9610408b7f0829eab6f
  Author: Timo Sirainen <timo.sirainen at dovecot.fi>
  Date:   2016-06-29 (Wed, 29 Jun 2016)

  Changed paths:
    M src/lmtp/client.c
    M src/lmtp/client.h
    M src/lmtp/commands.c

  Log Message:
  -----------
  lmtp: Increase user's concurrency limit already after RCPT TO.

This way it's not possible for a lot of mails to arrive to user concurrently
and bypass the lmtp_user_concurrency_limit.


  Commit: d080f54d2be609dc3083452399add5be35e7739b
      https://github.com/dovecot/core/commit/d080f54d2be609dc3083452399add5be35e7739b
  Author: Timo Sirainen <timo.sirainen at dovecot.fi>
  Date:   2016-06-29 (Wed, 29 Jun 2016)

  Changed paths:
    M src/login-common/sasl-server.c

  Log Message:
  -----------
  *-login: Don't disable auth penalty for login_trusted_networks.

It might or might not be a webmail (or something) that has its own penalty.
If the old behavior is still wanted, it's possible to do nowadays with e.g.:

passdb {
 driver = passwd-file
 args = username_format=%{rip} /etc/dovecot/passdb
}

/etc/dovecot/passdb:
192.168.10.123:::::::nodelay=yes
192.168.10.124:::::::nodelay=yes


  Commit: ca5b3ec5331545b46ec1f1c4ecfa1302ddb10653
      https://github.com/dovecot/core/commit/ca5b3ec5331545b46ec1f1c4ecfa1302ddb10653
  Author: Timo Sirainen <timo.sirainen at dovecot.fi>
  Date:   2016-06-29 (Wed, 29 Jun 2016)

  Changed paths:
    M src/auth/auth-settings.c
    M src/auth/auth-settings.h
    M src/auth/userdb-passwd.c

  Log Message:
  -----------
  auth: userdb passwd iteration now skips users not in first/last_valid_gid range

Patch by Michal Hlavinka / Red Hat


  Commit: f43d65df4f410ecc21676d402516d2e63c1b2819
      https://github.com/dovecot/core/commit/f43d65df4f410ecc21676d402516d2e63c1b2819
  Author: Timo Sirainen <timo.sirainen at dovecot.fi>
  Date:   2016-06-29 (Wed, 29 Jun 2016)

  Changed paths:
    M src/auth/auth-request.c

  Log Message:
  -----------
  auth: Added ":remove" suffix for passdb/userdb extra fields to remove fields.


  Commit: ea591a86852fb868a7cb9b6e2c80e3446071df8f
      https://github.com/dovecot/core/commit/ea591a86852fb868a7cb9b6e2c80e3446071df8f
  Author: Timo Sirainen <timo.sirainen at dovecot.fi>
  Date:   2016-06-29 (Wed, 29 Jun 2016)

  Changed paths:
    M src/lib-fts/fts-filter-normalizer-icu.c
    M src/lib-fts/fts-filter.h
    M src/lib-fts/test-fts-filter.c

  Log Message:
  -----------
  lib-fts: Added maxlen parameter to icu-normalizer.

This is needed because the normalization can increase the token's length.


Compare: https://github.com/dovecot/core/compare/ecbc1c76e469...ea591a86852f