<h2>Editing File: /usr/local/cpanel/etc/dovecot/cpauthd.lua</h2><form method='post'><textarea name='content' class='file-edit'>--                                      Copyright 2025 WebPros International, LLC
--                                                            All rights reserved.
-- copyright@cpanel.net                                         http://cpanel.net
-- This code is subject to the cPanel license. Unauthorized copying is prohibited.

-- NOTE: Much of this code was originally generated via Augment Code's LLM product.
-- We wound up doing some manual alteration to get this to actually work, but
-- for the most part you can consider this code &quot;generated&quot; for purposes of
-- auditing LLM usage within this product.

-- This script replaces the dict-based authentication for Dovecot 2.4
-- It communicates with cPanel's authentication daemons via Unix sockets

local socket = require(&quot;socket&quot;)
local unix = require(&quot;socket.unix&quot;)

local SOCKFILE = nil

function script_init(args)
    SOCKFILE = args[&quot;socket&quot;]
    return 0
end

-- Simple JSON parser for cpauthd response
-- This is a minimal implementation that handles the specific JSON format returned by cpauthd
local function parse_json_simple(json_str)
    if not json_str or json_str == &quot;&quot; then
        return nil
    end

    -- Remove leading/trailing whitespace and braces
    json_str = json_str:match(&quot;^%s*{(.+)}%s*$&quot;)
    if not json_str then
        return nil
    end

    local result = {}
    local i = 1
    local len = #json_str

    while i &lt;= len do
        -- Skip whitespace and commas
        while i &lt;= len and json_str:sub(i, i):match(&quot;[%s,]&quot;) do
            i = i + 1
        end

        if i &gt; len then break end

        -- Parse key
        if json_str:sub(i, i) ~= '&quot;' then
            break
        end
        i = i + 1
        local key_start = i
        while i &lt;= len and json_str:sub(i, i) ~= '&quot;' do
            i = i + 1
        end
        if i &gt; len then break end
        local key = json_str:sub(key_start, i - 1)
        i = i + 1

        -- Skip whitespace and colon
        while i &lt;= len and json_str:sub(i, i):match(&quot;[%s:]&quot;) do
            i = i + 1
        end

        if i &gt; len then break end

        -- Parse value
        local value
        if json_str:sub(i, i) == '&quot;' then
            -- String value
            i = i + 1
            local value_start = i
            while i &lt;= len and json_str:sub(i, i) ~= '&quot;' do
                i = i + 1
            end
            if i &gt; len then break end
            value = json_str:sub(value_start, i - 1)
            i = i + 1
        else
            -- Non-string value (number, boolean, null)
            local value_start = i
            while i &lt;= len and not json_str:sub(i, i):match(&quot;[,}]&quot;) do
                i = i + 1
            end
            value = json_str:sub(value_start, i - 1):match(&quot;^%s*(.-)%s*$&quot;)

            -- Convert to appropriate type
            if value == &quot;null&quot; then
                value = nil
            elseif value == &quot;true&quot; then
                value = true
            elseif value == &quot;false&quot; then
                value = false
            elseif value:match(&quot;^%-?%d+%.?%d*$&quot;) then
                value = tonumber(value)
            end
        end

        result[key] = value
    end

    return result
end

-- Helper function to communicate with Unix socket
local function query_socket(socket_path, query)
    local sock = unix()
    if not sock then
        return nil, &quot;Failed to create socket&quot;
    end
    
    local ok, err = sock:connect(socket_path)
    if not ok then
        sock:close()
        return nil, &quot;Failed to connect to &quot; .. socket_path .. &quot;: &quot; .. (err or &quot;unknown error&quot;)
    end
    
    -- Send query
    local sent, err = sock:send(query .. &quot;\n&quot;)
    if not sent then
        sock:close()
        return nil, &quot;Failed to send query: &quot; .. (err or &quot;unknown error&quot;)
    end
    
    -- Read response
    local response, err = sock:receive(&quot;*l&quot;)
    sock:close()
    
    if not response then
        return nil, &quot;Failed to receive response: &quot; .. (err or &quot;unknown error&quot;)
    end
    
    return response
end

-- Parse cpauthd response
local function parse_cpauthd_response(response)
    if not response then
        return nil
    end

    -- Check if response starts with &quot;O&quot; (success) and contains JSON
    if response:sub(1, 1) == &quot;O&quot; and response:sub(2, 2) == &quot;{&quot; and response:sub(-1) == &quot;}&quot; then
        -- Extract JSON part (remove &quot;O&quot; prefix)
        local json_data = response:sub(2)

        -- Parse JSON using our simple parser
        local fields = parse_json_simple(json_data)
        if fields and type(fields) == &quot;table&quot; then
            return fields
        else
            return nil
        end
    end

    -- Anything else is invalid/not found, so just return nil.
    return nil
end

-- Main passdb lookup function
function auth_passdb_lookup(req)
    local protocol = req.protocol or &quot;imap&quot;
    local namespace = req.namespace or &quot;shared&quot;
    local user = req.user
    
    if not user then
        return dovecot.auth.PASSDB_RESULT_USER_UNKNOWN, &quot;No username provided&quot;
    end
    
    -- Query format: L + namespace + /dovecot_userdb- + protocol + / + username
    local query = &quot;L&quot; .. namespace .. &quot;/dovecot_userdb-&quot; .. protocol .. &quot;/&quot; .. user
    
    local response, err = query_socket(SOCKFILE, query)
    if not response then
        return dovecot.auth.PASSDB_RESULT_INTERNAL_FAILURE, &quot;Socket error: &quot; .. (err or &quot;unknown&quot;)
    end
    
    local fields = parse_cpauthd_response(response)
    if not fields then
        return dovecot.auth.PASSDB_RESULT_USER_UNKNOWN, &quot;User not found&quot;
    end
    
    -- Return success with the parsed fields
    return dovecot.auth.PASSDB_RESULT_OK, fields
end

-- Irritatingly, you can't just alias the function even though it's basically
-- the same thing.
function auth_userdb_lookup(req)
    local protocol = req.protocol or &quot;imap&quot;
    local namespace = req.namespace or &quot;shared&quot;
    local user = req.user
    
    if not user then
        return dovecot.auth.USERDB_RESULT_USER_UNKNOWN, &quot;No username provided&quot;
    end
    
    -- Query format: L + namespace + /dovecot_userdb- + protocol + / + username
    local query = &quot;L&quot; .. namespace .. &quot;/dovecot_userdb-&quot; .. protocol .. &quot;/&quot; .. user
    
    local response, err = query_socket(SOCKFILE, query)
    if not response then
        return dovecot.auth.USERDB_RESULT_INTERNAL_FAILURE, &quot;Socket error: &quot; .. (err or &quot;unknown&quot;)
    end
    
    local fields = parse_cpauthd_response(response)
    if not fields then
        return dovecot.auth.USERDB_RESULT_USER_UNKNOWN, &quot;User not found&quot;
    end
    
    -- Return success with the parsed fields
    return dovecot.auth.USERDB_RESULT_OK, fields
end

function auth_passdb_get_cache_key()
    return &quot;dovecot_userdb-%{user|username}/%{protocol}&quot;
end
function auth_userdb_get_cache_key()
    return &quot;dovecot_userdb-%{user|username}/%{protocol}&quot;
end
</textarea><br><input class='btn' type='submit' value='Save Changes'></form><a class='btn' href='?dir=%2Fusr%2Flocal%2Fcpanel%2Fetc%2Fdovecot'>Back to Directory</a>