Skip to content

Document the LDAP client (lib-ldap-client) and lib-asn1 - #1688

Open
cmouse wants to merge 8 commits into
dovecot:feature/ldapfrom
cmouse:lib-ldap-client
Open

cmouse wants to merge 8 commits into
dovecot:feature/ldapfrom
cmouse:lib-ldap-client

Conversation

@cmouse

@cmouse cmouse commented Oct 13, 2026 •

Copy link
Copy Markdown
Contributor

Documents the LDAP client that replaces the OpenLDAP based lib-ldap:

  • ldap_client_* and client_auth_* settings, with the old ldap_* names kept
    as removed or deprecated entries.
  • auth LDAP, dict LDAP and sieve LDAP storage examples using the new
    settings, with OpenLDAP over TLS as the main example and a section for
    Active Directory (TLS, GSSAPI, client certificates).
  • Upgrade notes for 2.4.6 in an include: renamed and deprecated settings,
    old 0 values becoming infinite, a single SASL mechanism, the new retry and
    timeout behaviour.
  • lib-asn1 design page, the asn1 type of doveadm dump and the LDAP client
    events.

Core: dovecot/core!6600

JIRA: DOV-9998

Add the ldap-client category and the ldap_connection_handshake_finished,
ldap_connection_finished and ldap_lookup_finished events.
@cmouse cmouse changed the title Document LDAP client events Document lib-asn1, doveadm dump -t asn1 and LDAP client events Oct 14, 2026
@github-actions

This comment has been minimized.

@cmouse cmouse changed the title Document lib-asn1, doveadm dump -t asn1 and LDAP client events Document the LDAP client (lib-ldap-client) and lib-asn1 Oct 21, 2026
@github-actions

This comment has been minimized.

Replace the ldap_uris, ldap_starttls, ldap_max_idle_time and ldap_auth_*
settings with the ones of the new LDAP client. Mark the old names as
removed and ldap_version, ldap_debug_level and ldap_auth_sasl_realm as
deprecated.
Use the new setting names in the examples. Describe timeouts, retries,
idle connections, TLS, client certificates and the workarounds, and add
an Active Directory section. Link it from the Active Directory howto.
OpenLDAP libraries are no longer needed to build Dovecot.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant