dovecot-ldap.conf.ext for FreeIPA usage

Hello,

I'm figuring out how to auth users against FreeIPA and I wonder if someone did this without GSAPI.

My users are stored in a mysql DB where I wonder what I shall use as authname, the username or the mailaddress. As the mailaddress is always unique it could be best but if a user has multiple mailaddresses under seperate domains username might be better.

Any clue here and maybe an example for dovecot-ldap.conf.ext when using FreeIPA ?

Thanks!

Matt