[Dovecot] Authentication to Active Directory

[Chris Wakelin]

Has anybody managed to have Dovecot authenticate to Microsoft Active 
Directory?

I've tried to get it to work using LDAP and the following settings

dovecot.conf:

userdb = ldap /etc/dovecot-ldap.conf
passdb = ldap /etc/dovecot-ldap.conf

dovecot-ldap.conf:

hosts = rdg-home.ad.rdg.ac.uk
dn = cn=bind-user,cn=users,dc=rdg-home,dc=ad,dc=rdg,dc=ac,dc=uk
dnpass = XXXXX
ldap_version = 2
base = dc=rdg-home,dc=ad,dc=rdg,dc=ac,dc=uk
user_filter = (sAMAccountName=%u)
pass_filter = (sAMAccountName=%u)

I've also tried things like "(&(objectClass=sAMACcountName)(cn=%u))" to 
no avail. It appears to bind properly, but never finds the account, so 
login fails.

I've had Active Directory authentication working with Squid and with 
Cyrus SASL/IMAP.

Best Wishes,
Chris

--+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+--
Christopher Wakelin,                                c.d.wakelin at reading.ac.uk
IT Services Centre, The University of Reading,       Tel: +44 (0)118 378 8439
Whiteknights, Reading, RG6 2AF, UK                   Fax: +44 (0)118 975 3094