On Sun, 2012-05-13 at 13:21 +0200, Christian Rößner wrote:
May 13 13:03:20 mx0 dovecot: auth: Error: auth worker: Aborted request: Lookup timed out May 13 13:03:21 mx0 dovecot: auth-worker(26753): Error: LDAP: ldap_start_tls_s() failed: Connect error May 13 13:03:21 mx0 dovecot: auth-worker(26753): Error: LDAP: ldap_start_tls_s() failed: Can't contact LDAP server
Dovecot itself works. Only doveadm does not.
User iteration is done via auth-worker process, because it can take a long time. Regular passdb/userdb lookups are done via auth process, because they are fast. So:
service auth-worker { unix_listener auth-worker { user = vmail } user = vmail } service auth { extra_groups = ssl-cert unix_listener auth-userdb { mode = 0600 user = vmail } user = vmail }
I guess you need to add extra_groups=ssl-cert to auth-worker as well.