mirror of
https://github.com/mailcow/mailcow-dockerized.git
synced 2025-01-06 03:54:12 +02:00
[Dovecot] remove passwd-verify.lua generation
This commit is contained in:
parent
43ba5dfd09
commit
4f79d013d0
1
.gitignore
vendored
1
.gitignore
vendored
@ -17,7 +17,6 @@ data/conf/dovecot/mail_replica.conf
|
|||||||
data/conf/dovecot/global_sieve_*
|
data/conf/dovecot/global_sieve_*
|
||||||
data/conf/dovecot/last_login
|
data/conf/dovecot/last_login
|
||||||
data/conf/dovecot/lua
|
data/conf/dovecot/lua
|
||||||
data/conf/dovecot/auth/passwd-verify.lua
|
|
||||||
data/conf/dovecot/mail_plugins*
|
data/conf/dovecot/mail_plugins*
|
||||||
data/conf/dovecot/shared_namespace.conf
|
data/conf/dovecot/shared_namespace.conf
|
||||||
data/conf/dovecot/sni.conf
|
data/conf/dovecot/sni.conf
|
||||||
|
@ -128,52 +128,6 @@ user_query = SELECT CONCAT(JSON_UNQUOTE(JSON_VALUE(attributes, '$.mailbox_format
|
|||||||
iterate_query = SELECT username FROM mailbox WHERE active = '1' OR active = '2';
|
iterate_query = SELECT username FROM mailbox WHERE active = '1' OR active = '2';
|
||||||
EOF
|
EOF
|
||||||
|
|
||||||
cat <<EOF > /etc/dovecot/auth/passwd-verify.lua
|
|
||||||
function auth_password_verify(request, password)
|
|
||||||
if request.domain == nil then
|
|
||||||
return dovecot.auth.PASSDB_RESULT_USER_UNKNOWN, "No such user"
|
|
||||||
end
|
|
||||||
|
|
||||||
json = require "json"
|
|
||||||
ltn12 = require "ltn12"
|
|
||||||
https = require "ssl.https"
|
|
||||||
https.TIMEOUT = 5
|
|
||||||
|
|
||||||
local req = {
|
|
||||||
username = request.user,
|
|
||||||
password = password,
|
|
||||||
real_rip = request.real_rip,
|
|
||||||
protocol = {}
|
|
||||||
}
|
|
||||||
req.protocol[request.service] = true
|
|
||||||
local req_json = json.encode(req)
|
|
||||||
local res = {}
|
|
||||||
|
|
||||||
local b, c = https.request {
|
|
||||||
method = "POST",
|
|
||||||
url = "https://nginx:9082",
|
|
||||||
source = ltn12.source.string(req_json),
|
|
||||||
headers = {
|
|
||||||
["content-type"] = "application/json",
|
|
||||||
["content-length"] = tostring(#req_json)
|
|
||||||
},
|
|
||||||
sink = ltn12.sink.table(res),
|
|
||||||
insecure = true
|
|
||||||
}
|
|
||||||
local api_response = json.decode(table.concat(res))
|
|
||||||
if api_response.success == true then
|
|
||||||
return dovecot.auth.PASSDB_RESULT_OK, ""
|
|
||||||
end
|
|
||||||
|
|
||||||
return dovecot.auth.PASSDB_RESULT_PASSWORD_MISMATCH, "Failed to authenticate"
|
|
||||||
end
|
|
||||||
|
|
||||||
function auth_passdb_lookup(req)
|
|
||||||
return dovecot.auth.PASSDB_RESULT_USER_UNKNOWN, ""
|
|
||||||
end
|
|
||||||
EOF
|
|
||||||
|
|
||||||
|
|
||||||
# Migrate old sieve_after file
|
# Migrate old sieve_after file
|
||||||
[[ -f /etc/dovecot/sieve_after ]] && mv /etc/dovecot/sieve_after /etc/dovecot/global_sieve_after
|
[[ -f /etc/dovecot/sieve_after ]] && mv /etc/dovecot/sieve_after /etc/dovecot/global_sieve_after
|
||||||
# Create global sieve scripts
|
# Create global sieve scripts
|
||||||
|
42
data/conf/dovecot/auth/passwd-verify.lua
Normal file
42
data/conf/dovecot/auth/passwd-verify.lua
Normal file
@ -0,0 +1,42 @@
|
|||||||
|
function auth_password_verify(request, password)
|
||||||
|
if request.domain == nil then
|
||||||
|
return dovecot.auth.PASSDB_RESULT_USER_UNKNOWN, "No such user"
|
||||||
|
end
|
||||||
|
|
||||||
|
json = require "cjson"
|
||||||
|
ltn12 = require "ltn12"
|
||||||
|
https = require "ssl.https"
|
||||||
|
https.TIMEOUT = 5
|
||||||
|
|
||||||
|
local req = {
|
||||||
|
username = request.user,
|
||||||
|
password = password,
|
||||||
|
real_rip = request.real_rip,
|
||||||
|
protocol = {}
|
||||||
|
}
|
||||||
|
req.protocol[request.service] = true
|
||||||
|
local req_json = json.encode(req)
|
||||||
|
local res = {}
|
||||||
|
|
||||||
|
local b, c = https.request {
|
||||||
|
method = "POST",
|
||||||
|
url = "https://nginx:9082",
|
||||||
|
source = ltn12.source.string(req_json),
|
||||||
|
headers = {
|
||||||
|
["content-type"] = "application/json",
|
||||||
|
["content-length"] = tostring(#req_json)
|
||||||
|
},
|
||||||
|
sink = ltn12.sink.table(res),
|
||||||
|
insecure = true
|
||||||
|
}
|
||||||
|
local api_response = json.decode(table.concat(res))
|
||||||
|
if api_response.success == true then
|
||||||
|
return dovecot.auth.PASSDB_RESULT_OK, ""
|
||||||
|
end
|
||||||
|
|
||||||
|
return dovecot.auth.PASSDB_RESULT_PASSWORD_MISMATCH, "Failed to authenticate"
|
||||||
|
end
|
||||||
|
|
||||||
|
function auth_passdb_lookup(req)
|
||||||
|
return dovecot.auth.PASSDB_RESULT_USER_UNKNOWN, ""
|
||||||
|
end
|
Loading…
Reference in New Issue
Block a user