Confusion about ldap in 2.4
fc26wuqa--- via dovecot <[email protected]> Tue, 28 Apr 2026 11:30:16 +0200
| Newsgroups | gmane.mail.imap.dovecot |
|---|---|
| Message-ID | <[email protected]> |
Hello,
With dovecot 2.3 it was clear to me, how I should set up ldap:
Include `conf.d/auth-ldap.conf.ext` in `conf.d/10-auth.conf` and include
`dovecot-ldap.conf.ext` with the usual parameters like hosts, uris, dn, etc.
In dovecot 2.4 I am a little bit confused about whats the best practice.
I heard about that .ext files being outdated and examples in the
documentation saying I should put everything in dovecot.conf?
So If in 2.3 my config would look like this:
```
# auth-ldap.conf.ext
passdb {
driver = ldap
args = /etc/dovecot/dovecot-ldap.conf.ext
}
userdb {
driver = ldap
args = /etc/dovecot/dovecot-ldap.conf.ext
}
```
```
# dovecot-ldap.conf.ext
hosts = ldap.something.org:636
uris = ldaps://smoething.org
dn = cn=something,ou=something,dc=something,dc=org
dnspass = somethingsomething
auth_bind = yes
auth_bind_userdn = uid=%u,ou=something
...
```
I would put something like this in dovecot.conf? Or in
auth-ldap.conf.ext?
```
ldap_uris = ldap://ldap.example.org
ldap_auth_dn = cn=admin,dc=example,dc=org
ldap_auth_dn_password = secret
ldap_base = dc=example,dc=org
passdb ldap {
bind = yes
filter = (&(objectClass=posixAccount)(uid=%{user}))
fields {
user = %{ldap:uid}
}
}
```
(https://doc.dovecot.org/2.4.3/core/config/auth/databases/ldap.html#dn-lookup)
_______________________________________________
dovecot mailing list -- [email protected]
To unsubscribe send an email to [email protected]