Re: Update to v2.4.3 breaks ldap connection

On 30/03/2026 13:15 EEST markus-dovecot--- via dovecot <dovecot@dovecot.org> wrote:

Unfortunately the upgrade to v2.4.3 broke the ldap connection.

I have configured an ldap connection like this:

ldap_uris = ldaps://xxx.com
ldap_auth_dn = uid=xxx,ou=general accounts,dc=xxx,dc=com
ldap_auth_dn_password = xxx
ldap_base = dc=xxx,dc=com

passdb ldap {
    ldap_bind = yes
    [...]
}

v2.4.3 cannot connect and says:

auth: Error: ldap(ldaps://xxx.com636): Can't connect to server: ldaps://xxx.com

Ldap server logs:

ACCEPT from IP=[XXX]:45674 (IP=[::]:636)
TLS established tls_ssf=256 ssf=256 tls_proto=TLS1.3 tls_cipher=AES-256-GCM
closed (connection lost)

Downgrade to dovecot v2.4.2 makes it work again.

Was there any ldap change in v2.4.3 that required a config change?

Can you please turn on

log_debug=category=auth

and

ldap_debug_level=9

Aki