From b7a7ceb88ed5b44959920cde170bc6aaa83026bb Mon Sep 17 00:00:00 2001 From: Guilhem Moulin Date: Fri, 2 Jun 2017 14:25:21 +0200 Subject: dovecot: enable user iteration and add a cronjob for `doveadm purge -A` --- .../IMAP/files/usr/local/bin/dovecot-auth-proxy.pl | 130 +++++++++++++++++++++ 1 file changed, 130 insertions(+) create mode 100755 roles/IMAP/files/usr/local/bin/dovecot-auth-proxy.pl (limited to 'roles/IMAP/files/usr/local') diff --git a/roles/IMAP/files/usr/local/bin/dovecot-auth-proxy.pl b/roles/IMAP/files/usr/local/bin/dovecot-auth-proxy.pl new file mode 100755 index 0000000..cc52dbf --- /dev/null +++ b/roles/IMAP/files/usr/local/bin/dovecot-auth-proxy.pl @@ -0,0 +1,130 @@ +#!/usr/bin/perl + +#---------------------------------------------------------------------- +# socketmap lookup table returning the SASL login name(s) owning a given +# sender address +# Copyright © 2017 Guilhem Moulin +# +# This program is free software: you can redistribute it and/or modify +# it under the terms of the GNU General Public License as published by +# the Free Software Foundation, either version 3 of the License, or +# (at your option) any later version. +# +# This program is distributed in the hope that it will be useful, +# but WITHOUT ANY WARRANTY; without even the implied warranty of +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +# GNU General Public License for more details. +# +# You should have received a copy of the GNU General Public License +# along with this program. If not, see . +#---------------------------------------------------------------------- + +use warnings; +use strict; + +use Errno 'EINTR'; + +# clean up PATH +$ENV{PATH} = join ':', qw{/usr/bin /bin}; +delete @ENV{qw/IFS CDPATH ENV BASH_ENV/}; + +# number of pre-forked servers +my $nProc = 1; +sub server(); + +# fdopen(3) the file descriptor FD +die "This service must be socket-activated.\n" + unless defined $ENV{LISTEN_PID} and $ENV{LISTEN_PID} == $$ + and defined $ENV{LISTEN_FDS} and $ENV{LISTEN_FDS} == 1; +open my $S, '+<&=', 3 or die "fdopen: $!"; + +do { + my $dir = (getpwnam('vmail'))[7] // die "No such user: vmail"; + $dir .= '/virtual'; + chdir($dir) or die "chdir($dir): $!"; +}; + +my @CHILDREN; +for (my $i = 0; $i < $nProc-1; $i++) { + my $pid = fork() // die "fork: $!"; + if ($pid) { + push @CHILDREN, $pid; + } else { + server(); # child, never return + exit; + } +} +server(); +waitpid $_ => 0 foreach @CHILDREN; +exit $?; + + +############################################################################# + +sub server() { + for (my $n = 0; $n < 1; $n++) { + accept(my $conn, $S) or do { + next if $! == EINTR; + die "accept: $!"; + }; + + my $hello = $conn->getline() // ''; + unless ($hello =~ /\AH(\d+)\t(\d+)\t(\d+)(?:\t.*)?\n\z/) { + warn "Invalid greeting line: $hello\n"; + close $conn or warn "Can't close: $!"; + next; + } + # + unless ($1 == 2 and $2 == 0 and $3 == 0) { + warn "Unsupported protocol version $1.$2 (or value type $3)\n"; + close $conn or warn "Can't close: $!"; + next; + } + + my $cmd = $conn->getline() // ''; + if ($cmd =~ /\AI(\d+)\t(.*)\n\z/) { + iterate($conn, $1, $2); + } + else { + fail($conn => "Unknown command line: $cmd"); + } + close $conn or warn "Can't close: $!"; + } +} + +sub fail($;$) { + my ($fh, $msg) = @_; + $fh->printflush("F\n"); + warn "$msg\n" if defined $msg; +} + +# list all users, even the inactive ones +sub iterate($$$) { + my ($fh, $flags, $prefix) = @_; + unless ($flags == 0) { + fail($fh => "Unsupported iterate flags $flags"); + return; + } + + opendir my $dh, '.' or do { + fail($fh => "opendir: $!"); + return; + }; + while (defined (my $d = readdir $dh)) { + next if $d eq '.' or $d eq '..'; + opendir my $dh, $d or do { + fail($fh => "opendir: $!"); + return; + }; + while (defined (my $l = readdir $dh)) { + next if $l eq '.' or $l eq '..'; + my $user = $l.'@'.$d; + next unless $user =~ /\A[a-zA-Z0-9\.\-_@]+\z/; # skip invalid user names + $fh->printf("O%s%s\t\n", $prefix, $user); + } + closedir $dh or warn "closedir: $!"; + } + closedir $dh or warn "closedir: $!"; + + $fh->printflush("\n"); +} -- cgit v1.2.3