This documentation is for Dovecot v1.x, see wiki2 for v2.x documentation.

Userdb LDAP

Usually your LDAP database contains also the userdb information. If your home directory can be specified with a template and you're using only a single UID and GID, you should use static userdb instead to avoid an unnecessary LDAP lookup. You can also use prefetch userdb to avoid the userdb LDAP lookup.

Userdb lookups are always done using the default DN (dn setting) bind. It's not possible to do the lookup using the user's DN (remember that e.g. deliver needs to do userdb lookups without knowing the user's password).

The userdb lookups are configured in very much the same way as LDAP password lookups. Instead of pass_attrs and pass_filter, the userdb uses user_attrs and user_filter. Typically pass_filter and user_filter are equivalent.

If you're using a single UID and GID for all the users, you can specify them globally instead of returning them from LDAP:

Example:

user_attrs = homeDirectory=home, uidNumber=uid, gidNumber=gid
user_filter = (&(objectClass=posixAccount)(uid=%u))

Attribute templates (v1.1+)

You can mix static text with the value returned from LDAP by using %$ in the value. Some examples:

Create a "quota_rule" field with value "*:bytes=<n>" where <n> comes from "quotaBytes" LDAP attribute:

user_attrs = quotaBytes=quota_rule=*:bytes=%$

Create a "mail" field with value "maildir:/var/mail/<dir>" where <dir> comes from "sAMAccountName" LDAP attribute:

user_attrs = sAMAccountName=mail=maildir:/var/spool/vmail/%$

You can add static fields that aren't looked up from LDAP (v1.1.rc5+). For example create a "mail" field with value "/var/vmail/%d/%n":

user_attrs = \
  quotaBytes=quota_rule=*:bytes=%$, \
  =mail=/var/vmail/%d/%n

None: AuthDatabase/LDAP/Userdb (last edited 2009-03-15 22:35:13 by localhost)