# Router to send any mail for who a dovecot user exists to the appropriate maildir box
# Routers are evaluated in order of configuration.
# You will want to place this after the remote router and before the
# localuser router in the default configuration.
# If you want to allow + addressing (ie having an address extension)
# then uncomment the suffix stanzas
#dovecot_router:
#  driver = accept
#  local_part_suffix = +*
#  local_part_suffix_optional
#  require_files = +/home/dovecot/users/${local_part}/
#  transport = dovecot_transport

LDAP_AU_USER = uid=admin,dc=example,dc=com

#ldap_default_servers = localhost
LDAP_DN_USER = user=cn=admin,dc=example,dc=com
LDAP_DN_PASS = pass=secret
LDAP_DC_BASE = dc=example,dc=com
LDAP_OU_USERS = ou=Users
LDAP_OU_GROUPS = ou=domainGroups
LDAP_OU_ALIASES = ou=mailAliases

#ldap_aliases:
#    driver = redirect
#    domains = +local_domains
#    allow_fail
#    allow_defer
#    data = ${lookup ldap{LDAP_DN_USER LDAP_DN_PASS ldap:///LDAP_OU_ALIASES,LDAP_DC_BASE?rfc822MailMember?sub?(&(objectClass=nisMailAlias)(cn=${quote_ldap:$local_part}))}}
#    file_transport = address_file
#    pipe_transport = address_pipe

#ldap_groups_aliases:
#    driver = redirect
#    domains = +local_domains
#    data = ${lookup ldap{LDAP_DN_USER LDAP_DN_PASS ldap:///LDAP_OU_GROUPS,LDAP_DC_BASE?memberUID?sub?(&(cn=${quote_ldap:$local_part}))}}
#    file_transport = address_file
#    pipe_transport = address_pipe
#    allow_fail
#    allow_defer

ldap_user:
    driver = accept
    domains = +local_domains
    local_parts = ${lookup ldap{LDAP_DN_USER LDAP_DN_PASS ldap:///LDAP_OU_USERS,LDAP_DC_BASE?uid?sub?(&(objectclass=posixAccount)(uid=${quote_ldap:$local_part}))}}
    #user = mailnull
    #group = mail
    #transport = ldap_delivery
    user = vmail
    group = vmail
    transport = dovecot_deliver
    cannot_route_message = Unknown user

dovecot_router:
   debug_print = "R: ldap_local_user/dovecot_router for $local_part@$domain"
   driver = accept
   #domains = +ldap_local_domains
   domains = +local_domains
   #condition = LDAP_VIRT_COND
   condition = ${lookup ldap{LDAP_AU_USER LDAP_DN_PASS ldap://uid=$local_part,LDAP_OU_USERS,LDAP_DC_BASE}{yes}{no}}
   #router_home_directory = LDAP_VIRT_HOME
   #user = LDAP_VIRT_UID
   user= vmail
   #group = LDAP_VIRT_GID
   group = vmail
   local_part_suffix = +* : -*
   local_part_suffix_optional
   transport = dovecot_deliver