Authentication failure during Dovecot 2.3 to 2.4 upgrade: LDAP schema validation
0 reputation · 06 Sept 2022, 20:59 UTC
LDAP Backend Compatibility
Upgrading a Dovecot installation from version 2.3.x to 2.4.x introduces changes to how the LDAP authentication backend validates user entries. In version 2.3.x, the system allowed a fallback to the uid attribute for determining mailbox location if other attributes were missing.
In version 2.4.x, the backend implements stricter schema validation. This change requires the presence of the mail attribute, and entries lacking this specific attribute are rejected during the authentication process.
For environments where the LDAP directory is not managed by the mail administrator, updating the schema may not be feasible, creating a conflict between the required 2.4.x validation and existing directory structures.
- How can the LDAP backend in Dovecot 2.4.x be configured to permit the 2.3.x fallback behavior for the
mailattribute? - Is there a configuration parameter to disable strict schema validation for user entries?
dovecot