-/* $Id$
+/*
+ * $Id$
*
* POP3 server for the Citadel/UX system
* Copyright (C) 1998-2000 by Art Cancro and others.
* This code is released under the terms of the GNU General Public License.
*
- * This module implements all required POP3 server commands as described
- * in RFC1939. It also implements nearly all of the optional commands. The
- * only one missing is APOP, because it implements a "shared secret" method
- * of authentication which currently does not fit well with Citadel. Perhaps
- * we'll do it later.
+ * Current status of standards conformance:
+ *
+ * -> All required POP3 commands described in RFC1939 are implemented.
+ *
+ * -> Nearly all of the optional commands in RFC1939 are also implemented.
+ * The only one missing is APOP, because it implements a "shared secret"
+ * method of authentication which would require some major changes to the
+ * Citadel server core.
+ *
+ * This is no longer true- APOP is implemented.
+ *
+ * -> The deprecated "LAST" command is included in this implementation, because
+ * there exist mail clients which insist on using it (such as Bynari
+ * TradeMail, and certain versions of Eudora).
+ *
*/
#include "sysdep.h"
#include <sys/wait.h>
#include <string.h>
#include <limits.h>
+#include <ctype.h>
#include "citadel.h"
#include "server.h"
#include <time.h>
#include "tools.h"
#include "internet_addressing.h"
#include "serv_pop3.h"
-
+#include "md5.h"
long SYM_POP3;
* Here's where our POP3 session begins its happy day.
*/
void pop3_greeting(void) {
-
strcpy(CC->cs_clientname, "POP3 session");
CC->internal_pgm = 1;
CtdlAllocUserData(SYM_POP3, sizeof(struct citpop3));
POP3->msgs = NULL;
POP3->num_msgs = 0;
- cprintf("+OK Welcome to the Citadel/UX POP3 server at %s\r\n",
- config.c_fqdn);
+ cprintf("+OK Welcome to the Citadel/UX POP3 server %s\r\n",
+ CC->cs_nonce, config.c_fqdn);
}
* Specify user name (implements POP3 "USER" command)
*/
void pop3_user(char *argbuf) {
- char username[256];
+ char username[SIZ];
if (CC->logged_in) {
cprintf("-ERR You are already logged in.\r\n");
/*
* Back end for pop3_grab_mailbox()
*/
-void pop3_add_message(long msgnum) {
+void pop3_add_message(long msgnum, void *userdata) {
FILE *fp;
lprintf(9, "in pop3_add_message()\n");
POP3->msgs[POP3->num_msgs-1].deleted = 0;
fp = tmpfile();
POP3->msgs[POP3->num_msgs-1].temp = fp;
- CtdlOutputMsg(msgnum, MT_RFC822, 0, 0, fp, 0, 1);
+
+ CtdlRedirectOutput(fp, -1);
+ CtdlOutputMsg(msgnum, MT_RFC822, 0, 0, 1);
+ CtdlRedirectOutput(NULL, -1);
+
POP3->msgs[POP3->num_msgs-1].rfc822_length = ftell(fp);
}
* of messages in the inbox, or -1 for error)
*/
int pop3_grab_mailbox(void) {
+ struct visit vbuf;
+ int i;
+
if (getroom(&CC->quickroom, MAILROOM) != 0) return(-1);
- CtdlForEachMessage(MSGS_ALL, 0L, NULL, NULL, pop3_add_message);
+
+ /* Load up the messages */
+ CtdlForEachMessage(MSGS_ALL, 0L, (-63), NULL, NULL,
+ pop3_add_message, NULL);
+
+ /* Figure out which are old and which are new */
+ CtdlGetRelationship(&vbuf, &CC->usersupp, &CC->quickroom);
+ POP3->lastseen = (-1);
+ if (POP3->num_msgs) for (i=0; i<POP3->num_msgs; ++i) {
+ if ((POP3->msgs[POP3->num_msgs-1].msgnum) <= vbuf.v_lastseen) {
+ POP3->lastseen = i;
+ }
+ }
+
return(POP3->num_msgs);
}
+void pop3_login(void)
+{
+ int msgs;
+
+ msgs = pop3_grab_mailbox();
+ if (msgs >= 0) {
+ cprintf("+OK %s is logged in (%d messages)\r\n",
+ CC->usersupp.fullname, msgs);
+ lprintf(9, "POP3 password login successful\n");
+ }
+ else {
+ cprintf("-ERR Can't open your mailbox\r\n");
+ }
+
+}
+
+void pop3_apop(char *argbuf)
+{
+ char username[SIZ];
+ char userdigest[MD5_HEXSTRING_SIZE];
+ char realdigest[MD5_HEXSTRING_SIZE];
+ char *sptr;
+
+ if (CC->logged_in)
+ {
+ cprintf("-ERR You are already logged in; not in the AUTHORIZATION phase.\r\n");
+ return;
+ }
+
+ if ((sptr = strchr(argbuf, ' ')) == NULL)
+ {
+ cprintf("Invalid APOP line.\r\n");
+ return;
+ }
+
+ *sptr++ = '\0';
+
+ while ((*sptr) && isspace(*sptr))
+ sptr++;
+
+ strncpy(username, argbuf, sizeof(username)-1);
+ username[sizeof(username)-1] = '\0';
+
+ memset(userdigest, MD5_HEXSTRING_SIZE, 0);
+ strncpy(userdigest, sptr, MD5_HEXSTRING_SIZE-1);
+
+ if (CtdlLoginExistingUser(username) != login_ok)
+ {
+ cprintf("-ERR No such user.\r\n");
+ return;
+ }
+
+ if (getuser(&CC->usersupp, CC->curr_user))
+ {
+ cprintf("-ERR No such user.\r\n");
+ return;
+ }
+
+ make_apop_string(CC->usersupp.password, CC->cs_nonce, realdigest);
+ if (!strncasecmp(realdigest, userdigest, MD5_HEXSTRING_SIZE-1))
+ {
+ pop3_login();
+ }
+ else
+ {
+ cprintf("-ERR That is NOT the password! Go away!\r\n");
+ }
+}
+
+
/*
* Authorize with password (implements POP3 "PASS" command)
*/
void pop3_pass(char *argbuf) {
- char password[256];
- int msgs;
+ char password[SIZ];
strcpy(password, argbuf);
striplt(password);
lprintf(9, "Trying <%s>\n", password);
if (CtdlTryPassword(password) == pass_ok) {
- msgs = pop3_grab_mailbox();
- if (msgs >= 0) {
- cprintf("+OK %s is logged in (%d messages)\r\n",
- CC->usersupp.fullname, msgs);
- lprintf(9, "POP3 password login successful\n");
- }
- else {
- cprintf("-ERR Can't open your mailbox\r\n");
- }
+ pop3_login();
}
else {
cprintf("-ERR That is NOT the password! Go away!\r\n");
*/
void pop3_retr(char *argbuf) {
int which_one;
- int ch;
+ int ch = 0;
size_t bytes_remaining;
which_one = atoi(argbuf);
ch = getc(POP3->msgs[which_one - 1].temp);
cprintf("%c", ch);
}
+ if (ch != 10) {
+ lprintf(5, "Problem: message ends with 0x%2x, not 0x0a\n", ch);
+ }
cprintf(".\r\n");
}
}
-/* Perform "UPDATE state" stuff (remove messages marked for deletion)
+/* Perform "UPDATE state" stuff
*/
void pop3_update(void) {
int i;
+ struct visit vbuf;
+ /* Remove messages marked for deletion */
if (POP3->num_msgs > 0) for (i=0; i<POP3->num_msgs; ++i) {
if (POP3->msgs[i].deleted) {
CtdlDeleteMessages(MAILROOM,
- POP3->msgs[i].msgnum, NULL);
+ POP3->msgs[i].msgnum, "");
}
}
+
+ /* Set last read pointer */
+ if (POP3->num_msgs > 0) {
+ lgetuser(&CC->usersupp, CC->curr_user);
+
+ CtdlGetRelationship(&vbuf, &CC->usersupp, &CC->quickroom);
+ vbuf.v_lastseen = POP3->msgs[POP3->num_msgs-1].msgnum;
+ CtdlSetRelationship(&vbuf, &CC->usersupp, &CC->quickroom);
+
+ lputuser(&CC->usersupp);
+ }
+
}
+/*
+ * LAST (Determine which message is the last unread message)
+ */
+void pop3_last(char *argbuf) {
+ cprintf("+OK %d\r\n", POP3->lastseen + 1);
+}
+
+
/*
* UIDL (Universal IDentifier Listing) is easy. Our 'unique' message
* Main command loop for POP3 sessions.
*/
void pop3_command_loop(void) {
- char cmdbuf[256];
+ char cmdbuf[SIZ];
time(&CC->lastcmd);
memset(cmdbuf, 0, sizeof cmdbuf); /* Clear it, just in case */
pop3_pass(&cmdbuf[5]);
}
+ else if (!strncasecmp(cmdbuf, "APOP", 4))
+ {
+ pop3_apop(&cmdbuf[5]);
+ }
+
else if (!CC->logged_in) {
cprintf("-ERR Not logged in.\r\n");
}
pop3_top(&cmdbuf[4]);
}
+ else if (!strncasecmp(cmdbuf, "LAST", 4)) {
+ pop3_last(&cmdbuf[4]);
+ }
+
else {
cprintf("500 I'm afraid I can't do that, Dave.\r\n");
}
char *Dynamic_Module_Init(void)
{
SYM_POP3 = CtdlGetDynamicSymbol();
- CtdlRegisterServiceHook(POP3_PORT,
+ CtdlRegisterServiceHook(config.c_pop3_port,
+ NULL,
pop3_greeting,
pop3_command_loop);
CtdlRegisterSessionHook(pop3_cleanup_function, EVT_STOP);