#dnpass = useless with sasl_mech=EXTERNAL
# DOC: https://wiki.dovecot.org/AuthDatabase/LDAP/AuthBinds
# Using auth_bind is a bit more secure : dovecot does not need
-# to have read acces to userPassword.
+# to have read access to userPassword.
auth_bind = yes
auth_bind_userdn = uid=%n,ou=accounts,ou=posix,dc=%Dd