Should I also edit /etc/amavis/conf.d/50-user accordingly?

Yes.

BTW, Please post your own question in a new forum topic, do not hijack other's thread.

    I couldn't get hard code to work, but changing userPrincipalName attribute to mail attribute is working.  I think my original problem was dovecot doesn't like base = dc=corp,dc=example,dc=com, but since I have everything in an OU it works with base = ou=ExampleOU,dc=corp,dc=example,dc=com

Should I also edit /etc/amavis/conf.d/50-user accordingly?

Thank you, Ed

  My domain is corp.example.com, and mail is example.com.  Can we just change the userPrincipalName attribute to mail attribute and define in ad such as emacri@example.com?

   I had this working is Postfix but couldn't get Dovecot accept login.  I have tried the above methods but no Dovecot.  I am starting over fresh with just corp.example.com to make sure all is working before I start changing things again.

Thank you, Ed

First I added an modified account for iRedmail suite: vmailer@example.org instead of vmail@example.org.

I also did some changes to some of the files mentioned in the integration how-to:
Edit /etc/amavis/conf.d/50-user (at the bottom):
$default_ldap   = {
    hostname        => "127.0.0.1",
    port            => 389,
    version         => 3,
    tls             => 0,
    timeout         => 120,
    base            => "ou=%d,dc=example,dc=org",
    scope           => "sub",
    query_filter    => "(&(userPrincipalName=%s)(objectClass=person)(!(userAccountControl:1.2.840.113556.1.4.803:=2)))",
    result_attribute => "userPrincipalName",
    bind_dn         => "cn=vmailer,cn=users,dc=example,dc=org",
    bind_password   => "Pa$$w0rd",
};

Minor changes to /etc/postfix/ad_sender_login_maps.cf, /etc/postfix/ad_virtual_group_maps.cf and /etc/postfix/ad_virtual_mailbox_maps.cf:
search_base = cn=users,dc=example,dc=org -> search_base = dc=example,dc=org

Changed the following line in/etc/dovecot/dovecot-ldap.conf
base = cn=User,dc=example,dc=org -> base = ou=%d,dc=example,dc=org

Add the mail domain to /etc/postfix/transport.
Continue with editing /etc/default/slapd. Uncomment #SLAPD_NO_START=1.

Thank you
Davor

how did u guys add alias adresses ?

You can add alias addresses manually, or with iRedAdmin-Pro (http://www.iredmail.org/admin_panel.html).

how did u guys add alias adresses ?

Dovecot

hosts           = ad.domain.lan:389
ldap_version    = 3
auth_bind       = yes
dn              = vmail
dnpass          = Password
base            = ou=DomainUsers,dc=domain,dc=lan
scope           = subtree
deref           = never
user_filter     = (&(userPrincipalName=%n@domain.lan)(objectClass=person)(!(userAccountControl:1.2.840.113556.1.4.803:=2)))
pass_filter     = (&(userPrincipalName=%n@domain.lan)(objectClass=person)(!(userAccountControl:1.2.840.113556.1.4.803:=2)))
pass_attrs      = userPassword=password
default_pass_scheme = CRYPT
user_attrs      = =home=/var/vmail/vmail1/%Ld/%Ln/Maildir/,=mail=maildir:/var/vmail/vmail1/%Ld/%Ln/Maildir/ 

Postfix

server_host     = ad.domain.lan
server_port     = 389
version         = 3
bind            = yes
start_tls       = no
bind_dn         = vmail
bind_pw         = Password
search_base     = ou=DomainUsers,dc=domain,dc=lan
scope           = sub
query_filter    = (&(userPrincipalName=%u@domain.lan)(objectClass=person)(!(userAccountControl:1.2.840.113556.1.4.803:=2)))
result_attribute= userPrincipalName
debuglevel      = 0

With the method I've mentionned before, it cannot login using a domain wich isn't in the specified OU... Therefore, I can't help you if you don't use this trick, because I only know this one.

%u@domain.lan for postfix and %n@domain.lan for dovecot.  This allows user@ANYNAME.COM to login successfully.  I guess this is a semi-victory as I can now use my desired domain.  Now I just need to restrict this to only allow the domain that I wish to use.

Any thoughts?

What isn't working as expected ? Did you try tests commands as mentionned in the howto ?

In my case, my AD domain is called "domain.lan" and my externals domains are called "domain2.fr", "domain3.com", "domain4.biz"

So, I've made an OU called "domains" at the root of my AD tree (under "domain.lan") and I've made others OU under "domains", one for each domains I'm supposed to manage.

After this, in Dovecot :

/etc/dovecot/dovecot-ldap.conf :

hosts           = dc.domain.lan:389
ldap_version    = 3
auth_bind       = yes
dn              = vmail@domain.lan
dnpass          = password_of_vmail
base            = ou=domains,dc=domain,dc=lan
scope           = subtree
deref           = never
user_filter     = (&(userPrincipalName=%u)(objectClass=person)(!(userAccountControl:1.2.840.113556.1.4.803:=2)))
pass_filter     = (&(userPrincipalName=%u)(objectClass=person)(!(userAccountControl:1.2.840.113556.1.4.803:=2)))
pass_attrs      = userPassword=password
default_pass_scheme = CRYPT
user_attrs      = =home=/path_to_your_storage/%Ld/%Ln/Maildir/,=mail=maildir:/path_to_your_storage/mail/%Ld/%Ln/Maildir/

With this config, users must authenticate with, as username, the full email address.

Use the same config in Postfix, but beware to add the line "result_attribute= userPrincipalName" in each 3 files *_maps.cf" (I've modified only those files), beacause you'll had duplicates results with the tests commands mentionned in the howto.

Had I answered to your problem ?

Nicolas