Re: Using 2 LDAP sources for passdb

Aki Tuomi via dovecot <[email protected]> Tue, 2 Jun 2026 16:36:34 +0300 (EEST)
Newsgroups gmane.mail.imap.dovecot
Message-ID <768919081.7335.1780407394488@appsuite-pro-sync-core-mw-groupware-0.appsuite-pro-sync-core-mw-hazelcast-headless.appsuite-dev.svc.cluster.local>
> On 02/06/2026 16:33 EEST Aki Tuomi via dovecot <[email protected]> wrote:
> 
>  
> > On 02/06/2026 16:21 EEST Tom via dovecot <[email protected]> wrote:
> > 
> >  
> > I can't seem to find documentation that shows how to set up 2 LDAP passdb blocks. I can get each of them working properly, but only the second of the two works at any given time. I can't figure out the syntax needed to get both to work, even though I've been all over the Dovecot 2.4x official documentation. The docs seem to suggest settings that the server rejects.
> > 
> > Anyone have any experience doing this, or know the correct syntax? Thanks in advance!
> 
> # you can share settings like this
> ldap_auth_dn = cn=dovecot,ou=apps,dc=example,dc=com
> ldap_auth_dn_password = D0vec0t
> ldap_uris = ldapi://%2Frun%2Fldapi
> ldap_version = 3 
> ldap_bind = yes
> 
> passdb ldab-1 {
>  driver = ldap 
>  ldap_bind_userdn = cn=%{user},ou=apps,dc=example,dc=com
>  ldap_filter = (&(objectClass=applicationProcess)(cn=%{user}))
> }
> 
> passdb ldap-2 {
>   driver = ldap
>   ldap_bind_userdn = cn=%{user},ou=apps,dc=example,dc=com
>   ldap_filter = (&(objectClass=posixAccount)(uid=%{user|username})(memberOf=cn=mail,ou=%{user|domain},ou=groups,dc=example,dc=com))
> }
> 
> Aki

Sorry, small mistake

ldap_bind = yes => passdb_ldap_bind = yes

Aki

_______________________________________________
dovecot mailing list -- [email protected]
To unsubscribe send an email to [email protected]