But how spamd will know what ldap server to contact?
Well clearly this has *nothing* to do with the --setuid-with-ldap parameter. --setuid-with-ldap can't tell SA what ldap server to use.
Note: you still probably want to pass -x and --ldap-config but you do NOT want to pass --setuid-with-ldap.
Do I need to put in /etc/spamassassin/local.cf something like
' user_scores_dsn ldap://host:port/dc=basedn,dc=de?attr?scope?uid=__USERNAME__' or what?
And I don't want at all to extend Windows AD schema (this is our ldap :) with spamassassin attributes.
Is there a solution?
Wait.. what do you want ldap for???? If you don't want to store SA attributes there, why are you having SA use LDAP at all? It's pointless...