# Authentication for LDAP users. Included from 10-auth.conf.
#
# <doc/wiki/AuthDatabase.LDAP.txt>

passdb {
  driver = ldap

  # Path for LDAP configuration file, see example-config/dovecot-ldap.conf.ext
  args = /etc/dovecot/dovecot-ldap.conf.ext
}

# "prefetch" user database means that the passdb already provided the
# needed information and there's no need to do a separate userdb lookup.
# <doc/wiki/UserDatabase.Prefetch.txt>
#userdb {
#  driver = prefetch
#}

#userdb {
#  driver = ldap
#  args = /etc/dovecot/dovecot-ldap-userdb.conf.ext
#
#  # Default fields can be used to specify defaults that LDAP may override
#  default_fields = home=/home/mail/virtual/%d/%n
#}

# If you don't have any user-specific settings, you can avoid the userdb LDAP
# lookup by using userdb static instead of userdb ldap, for example:
# <doc/wiki/UserDatabase.Static.txt>
userdb {
  driver = static

  # The MTA has already verified the existence of users when doing alias resolution,
  # so we can skip the passdb lookup here.
  args = home=/home/mail/virtual/%d/%n allow_all_users=yes
}

# Used only for iteration as the static userdb above always succeeds
userdb {
  driver = dict
  skip = found
  result_internalfail = return-fail
  args = /etc/dovecot/dovecot-dict-auth.conf.ext
}