[Dovecot] Yet another going from 1.2 to 2.X question: authentication

So in 1.2.9 I had something like this:

[...]

socket listen { master { path = /var/run/dovecot/auth-master mode = 0600 user = virtual # User running Dovecot LDA's deliver } }

# Dovecot as SASL Auth socket listen { client { path = /var/spool/postfix/private/dovecot-auth mode = 0660 user = postfix group = postfix } }

I see I can, per http://wiki2.dovecot.org/HowTo/PostfixAndDovecotSASL, setup the sasl entry as

# Dovecot as SASL Auth service auth { unix_listener /var/spool/postfix/private/dovecot-auth mode = 0660 user = postfix group = postfix }

what about the lda? From http://wiki2.dovecot.org/LDA I take it would be as simple as

service auth { unix_listener auth-userdb { mode = 0600 user = virtual # User running Dovecot LDA's deliver } }

Am I correct?