Final solution provided by the Openldap mailing list: > Just change your authz-regexp line to > > authz-regexp "^uid=([^,]+).*,cn=[^,]*,cn=auth$" > "ldap:///dc=linuxwall,dc=info??sub?(|(uid=$1)(mail=$1))"
And the authentication works. I think it's worth a line in the sasl howto to explain that postfix will use the email value to authenticate the user, and therefore the authz-regex should take it into account... Julien