<?xml version="1.0" encoding="utf-8"?>
<feed xmlns="http://www.w3.org/2005/Atom">
	<title type="html"><![CDATA[iRedMail — Active Directory integration in Dovecot]]></title>
	<link rel="self" href="https://forum.iredmail.org/feed-atom-topic21221.xml" />
	<updated>2026-09-16T11:19:57Z</updated>
	<generator>PunBB</generator>
	<id>https://forum.iredmail.org/topic21221-active-directory-integration-in-dovecot.html</id>
		<entry>
			<title type="html"><![CDATA[Active Directory integration in Dovecot]]></title>
			<link rel="alternate" href="https://forum.iredmail.org/post92246.html#p92246" />
			<content type="html"><![CDATA[<p>==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====<br />- iRedMail version (check /etc/iredmail-release): 1.8.8 <br />- Deployed with downloadable installer<br />- Linux/BSD distribution name and version: Debian13<br />- Store mail accounts: LDAP <br />- Web server (Apache or Nginx): Nginx<br />- Manage mail accounts with iRedAdmin-Pro? No<br />- [IMPORTANT] Related original log or error message is required if you&#039;re experiencing an issue.<br />====</p><p>I installed iredmail 1.8.8 with OpenLDAP on Debian13 and configured the integration with ActiveDirectory according to the official instructions </p><p>The connection between Dovecot and AD via LDAP is not working. The diagnostics show that Dovecot is using the configuration from the dovecot.conf file and is not taking into account the connection parameters in the dovecot-ldap.conf file.</p><p>Example of an error:</p><p># telnet localhost 143<br />Trying ::1...<br />Connected to localhost.<br />Escape character is &#039;^]&#039;.<br />* OK [CAPABILITY IMAP4rev1 LOGIN-REFERRALS ID ENABLE IDLE SASL-IR LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready.<br />. login mailuser@staff.local ********<br />. NO [AUTHENTICATIONFAILED] Authentication failed.<br />==========================================</p><p>dovecot-ldap.conf:</p><p>hosts&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;= pc01.staff.local:389<br />ldap_version&nbsp; &nbsp; = 3<br />auth_bind&nbsp; &nbsp; &nbsp; &nbsp;= yes<br />dn&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; = cn=intmail2-ldap,dc=staff,dc=local<br />dnpass&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; = ************<br />base&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; = ou=chelgu,dc=staff,dc=local<br />scope&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;= subtree<br />deref&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;= never<br />debug_level&nbsp; &nbsp; &nbsp;= 0</p><p># Below two are required by command &#039;doveadm mailbox ...&#039;<br />iterate_attrs&nbsp; &nbsp;= userPrincipalName=user<br />iterate_filter&nbsp; = (&amp;(userPrincipalName=*)(objectClass=person)(!(userAccountControl:1.2.840.113556.1.4.803:=2)))</p><p>user_filter&nbsp; &nbsp; &nbsp;= (&amp;(userPrincipalName=%u)(objectClass=person)(!(userAccountControl:1.2.840.113556.1.4.803:=2)))<br />pass_filter&nbsp; &nbsp; &nbsp;= (&amp;(userPrincipalName=%u)(objectClass=person)(!(userAccountControl:1.2.840.113556.1.4.803:=2)))<br />pass_attrs&nbsp; &nbsp; &nbsp; = userPassword=password<br />default_pass_scheme = CRYPT<br />user_attrs&nbsp; &nbsp; &nbsp; = mail=master_user,mail=user,=home=/var/vmail/vmail1/%Ld/%Ln/,=mail=maildir:~/Maildir/<br />============================================</p><p>The output of doveconf -n shows the default LDAP connection parameters from the dovecot.conf file.</p><p>***<br />ldap_auth_dn = cn=vmail,dc=staff,dc=local<br />ldap_auth_dn_password = # hidden, use -P to show it<br />ldap_base = o=domains,dc=staff,dc=local<br />ldap_uris = ldap://127.0.0.1:389<br />***</p>]]></content>
			<author>
				<name><![CDATA[msh]]></name>
				<uri>https://forum.iredmail.org/user161775.html</uri>
			</author>
			<updated>2026-09-16T11:19:57Z</updated>
			<id>https://forum.iredmail.org/post92246.html#p92246</id>
		</entry>
</feed>
