debug_level = 0

# LDAP database 
uris = ldapi://
base = ou=posix,dc=sourcephile,dc=fr
scope = subtree
deref = never
# NOTE: sufficient for small systems and uses less resources.
blocking = no

# LDAP auth
sasl_bind = yes
sasl_mech = EXTERNAL
#dn = cn=admin,dc=sourcephile,dc=fr
#dnpass = useless with sasl_mech=EXTERNAL
auth_bind = no
#auth_bind_userdn = cn=%n,ou=accounts,ou=posix,dc=dc=sourcephile,dc=fr

# dovecot passdb query
pass_filter = (&(objectClass=posixAccount)(uid=%n)(mailEnabled=TRUE))
pass_attrs = userPassword=password,\
             uidNumber=userdb_uid,\
             gidNumber=userdb_gid,\
             mailStorageDirectory=userdb_mail,\
             =userdb_mail_access_groups=sourcephile,\
             =userdb_quota_rule=*:bytes=%{ldap:quotaBytes:250M},\
             =user=%n@%d
             #homeDirectory=userdb_home
default_pass_scheme = CRYPT

# dovecot userdb query
# For dovecot-lda
user_filter = (&(objectClass=posixAccount)(uid=%n)(mailEnabled=TRUE))
user_attrs = mailStorageDirectory=mail,\
             uidNumber=uid,\
             gidNumber=gid,\
             mailStorageDirectory=mail,\
             =mail_access_groups=sourcephile,\
             =quota_rule=*:bytes=%{ldap:quotaBytes:250M}

# doveadm user query
iterate_attrs = =user=%{ldap:uid}@sourcephile.fr
iterate_filter = (&(objectClass=posixAccount)(mailEnabled=TRUE))