[Dovecot] shared or acl or etc

[John Smith]

Hello,  I need help:

[root at dovecot]# dovecot -n
# 2.1.16: /etc/dovecot/dovecot.conf
# OS: Linux 2.6.32-358.18.1.el6.x86_64 x86_64 CentOS release 6.4 (Final)
auth_debug = yes
auth_mechanisms = plain login
auth_use_winbind = yes
auth_username_format = %u
auth_verbose = yes
base_dir = /var/run/dovecot/
disable_plaintext_auth = no
listen = *
mail_access_groups = vmail
mail_debug = yes
mail_gid = 5000
mail_location = maildir:~/:LAYOUT=fs
mail_plugins = " quota acl"
mail_privileged_group = vmail
mail_uid = 5000
mbox_write_locks = fcntl
namespace {
  list = children
  location = maildir:%%h:INDEX=~/shared/%%u
  prefix = shared/%%u/
  separator = /
  subscriptions = no
  type = shared
}
namespace inbox {
  inbox = yes
  location =
  mailbox Drafts {
    special_use = \Drafts
  }
  mailbox Junk {
    special_use = \Junk
  }
  mailbox Sent {
    special_use = \Sent
  }
  mailbox "Sent Messages" {
    special_use = \Sent
  }
  mailbox Trash {
    special_use = \Trash
  }
  prefix =
}
passdb {
  args = /etc/dovecot/dovecot-ldap.conf.ext
  driver = ldap
}
plugin {
  acl = vfile:/etc/dovecot/global-acls:cache_secs=300
  autocreate = Sent
  autocreate2 = Trash
  autocreate3 = Drafts
  autosubscribe = Sent
  autosubscribe2 = Trash
  autosubscribe3 = Drafts
  quota = maildir:User quota
  quota_rule = *:storage=100M
  quota_rule2 = Trash:storage=+100M
  quota_rule3 = Sent:storage=+100M
  quota_warning = storage=95%% quota-warning 95 %u
  quota_warning2 = storage=80%% quota-warning 80 %u
}
service auth {
  unix_listener /var/spool/postfix/private/auth {
    mode = 0666
  }
  unix_listener auth-userdb {
    mode = 0666
    user = vmail
  }
}
service quota-warning {
  executable = script /usr/local/bin/quota-warning.sh
  unix_listener quota-warning {
    user = vmail
  }
  user = dovecot
}
ssl = no
ssl_cert = </etc/pki/dovecot/certs/dovecot.pem
ssl_key = </etc/pki/dovecot/private/dovecot.pem
userdb {
  args = /etc/dovecot/dovecot-ldap.conf.ext
  driver = ldap
}
userdb {
  args = uid=5000 gid=5000
  driver = static
}
valid_chroot_dirs = /home/vmail/
protocol imap {
  mail_plugins = " quota acl autocreate imap_quota imap_acl"
}

[root at dovecot]# grep -v '^ *\(#.*\)\?$' dovecot-ldap.conf.ext
hosts = dc1.domain.local dc2.domain.local
dn = CN=ldapsearch,OU=Service Accounts,DC=domain,DC=local
dnpass = ******
auth_bind = yes
auth_bind_userdn = %Lu
base = OU=GroupOfCompanies,DC=domain,DC=local
deref = never
scope = subtree
user_filter =
(&(!(userAccountControl:1.2.840.113556.1.4.803:=2))(|(mail=%Lu)(otherMailbox=%Lu)(sAMAccountName=%Lu)))
user_attrs = sAMAccountName=home=/home/vmail/%L$,
maxStorage=quota_rule=*:bytes=%$M
pass_filter = (&(sAMAccountType=805306368)(sAMAccountName=%Lu))
pass_attrs = sAMAccountName=user,userPassword=password

With these settings the domain users successfully authenticate and can
receive mail from their mail_localtion, however there are a few users with
the same email address, but different sAMAccountName
These users use the same e-mail on all connected by imap.

Tell me how to beat this situation?