disable_plaintext_auth = yes
auth_mechanisms = plain login
protocols = imap
service auth {
  unix_listener /var/spool/postfix/private/auth {
    group = postfix
    mode = 0660
    user = postfix
  }
}
passdb {
        driver = ldap
        args = /etc/dovecot/dovecot-ldap.conf
}
userdb {
        driver = ldap
        args = /etc/dovecot/dovecot-ldap.conf
}
ssl_cert =</etc/pki/tls/certs/ca.crt
ssl_key = </etc/pki/tls/private/ca.key
mail_home = /var/mail/vmail/%d/%n
mail_location = maildir:~/mail

# debug logging
auth_debug = yes
auth_verbose = yes
#auth_debug_passwords = yes
verbose_ssl = yes
mail_debug = yes


--------------------------------
dovecot-ldap.conf
hosts = ldap.domain.net
sasl_bind = yes
dn = cn=ldapadmin,dc=domain,dc=net
dnpass = pass
auth_bind = yes
auth_bind_userdn = cn=%u,ou=People,dc=domain,dc=net
base = dc=domain,dc=net
scope = subtree
#user_attrs = homeDirectory=home, uidNumber=uid, gidNumber=gid
user_attrs = %n,%Dd=user
pass_attrs = mail=user, userPassword=password
pass_filter = (&(objectClass=inetOrgPerson)(mail=%u))