<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
	<channel>
		<title><![CDATA[iRedMail — Active Directory integration in Dovecot]]></title>
		<link>https://forum.iredmail.org/topic21221-active-directory-integration-in-dovecot.html</link>
		<atom:link href="https://forum.iredmail.org/feed-rss-topic21221.xml" rel="self" type="application/rss+xml" />
		<description><![CDATA[The most recent posts in Active Directory integration in Dovecot.]]></description>
		<lastBuildDate>Wed, 16 Sep 2026 11:19:57 +0000</lastBuildDate>
		<generator>PunBB</generator>
		<item>
			<title><![CDATA[Active Directory integration in Dovecot]]></title>
			<link>https://forum.iredmail.org/post92246.html#p92246</link>
			<description><![CDATA[<p>==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====<br />- iRedMail version (check /etc/iredmail-release): 1.8.8 <br />- Deployed with downloadable installer<br />- Linux/BSD distribution name and version: Debian13<br />- Store mail accounts: LDAP <br />- Web server (Apache or Nginx): Nginx<br />- Manage mail accounts with iRedAdmin-Pro? No<br />- [IMPORTANT] Related original log or error message is required if you&#039;re experiencing an issue.<br />====</p><p>I installed iredmail 1.8.8 with OpenLDAP on Debian13 and configured the integration with ActiveDirectory according to the official instructions </p><p>The connection between Dovecot and AD via LDAP is not working. The diagnostics show that Dovecot is using the configuration from the dovecot.conf file and is not taking into account the connection parameters in the dovecot-ldap.conf file.</p><p>Example of an error:</p><p># telnet localhost 143<br />Trying ::1...<br />Connected to localhost.<br />Escape character is &#039;^]&#039;.<br />* OK [CAPABILITY IMAP4rev1 LOGIN-REFERRALS ID ENABLE IDLE SASL-IR LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready.<br />. login mailuser@staff.local ********<br />. NO [AUTHENTICATIONFAILED] Authentication failed.<br />==========================================</p><p>dovecot-ldap.conf:</p><p>hosts&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;= pc01.staff.local:389<br />ldap_version&nbsp; &nbsp; = 3<br />auth_bind&nbsp; &nbsp; &nbsp; &nbsp;= yes<br />dn&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; = cn=intmail2-ldap,dc=staff,dc=local<br />dnpass&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; = ************<br />base&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; = ou=chelgu,dc=staff,dc=local<br />scope&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;= subtree<br />deref&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;= never<br />debug_level&nbsp; &nbsp; &nbsp;= 0</p><p># Below two are required by command &#039;doveadm mailbox ...&#039;<br />iterate_attrs&nbsp; &nbsp;= userPrincipalName=user<br />iterate_filter&nbsp; = (&amp;(userPrincipalName=*)(objectClass=person)(!(userAccountControl:1.2.840.113556.1.4.803:=2)))</p><p>user_filter&nbsp; &nbsp; &nbsp;= (&amp;(userPrincipalName=%u)(objectClass=person)(!(userAccountControl:1.2.840.113556.1.4.803:=2)))<br />pass_filter&nbsp; &nbsp; &nbsp;= (&amp;(userPrincipalName=%u)(objectClass=person)(!(userAccountControl:1.2.840.113556.1.4.803:=2)))<br />pass_attrs&nbsp; &nbsp; &nbsp; = userPassword=password<br />default_pass_scheme = CRYPT<br />user_attrs&nbsp; &nbsp; &nbsp; = mail=master_user,mail=user,=home=/var/vmail/vmail1/%Ld/%Ln/,=mail=maildir:~/Maildir/<br />============================================</p><p>The output of doveconf -n shows the default LDAP connection parameters from the dovecot.conf file.</p><p>***<br />ldap_auth_dn = cn=vmail,dc=staff,dc=local<br />ldap_auth_dn_password = # hidden, use -P to show it<br />ldap_base = o=domains,dc=staff,dc=local<br />ldap_uris = ldap://127.0.0.1:389<br />***</p>]]></description>
			<author><![CDATA[null@example.com (msh)]]></author>
			<pubDate>Wed, 16 Sep 2026 11:19:57 +0000</pubDate>
			<guid>https://forum.iredmail.org/post92246.html#p92246</guid>
		</item>
	</channel>
</rss>
