Hi John, You are correct in that the myNewUser attribute is optional. Therefore I configured /etc/saslauth.dconf like this:
ldap_auth_method: bind ldap_servers: ldap://172.28.1.22 ldap_search_base: ou=people,dc=example,dc=ca ldap_use_sasl: no ldap_filter: (&(uid=%u)(|(!(myNewUser=true)))(!(myNewUser=*))) This is working perfectly. The saslauthd documentation wasn't clear on this. Never occured to me to try proper LDAP syntax. Thanks, Adi --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html