search for: ldap_member_attribute

...work something like : you can put this in idmap.conf https://www.cyrusimap.org/imap/reference/manpages/configs/imapd.conf.html ldap_group_base: dc=example,dc=com ldap_group_filter: (&(cn=%u)(objectclass=WhatYOUneed)(objectclass=Someother)) ldap_group_scope: sub ldap_member_method: attribute ldap_member_attribute: mail > > > You see this note from the script: > > Running as Unix domain member and no user.map detected. > > > > Where is you user mapping? You dont use SePrivileges? > > Now its not wrong and possible to run it without, but it is > much more work to se...

Hai Sven, And still i see/think you should change some things to get a better base setup. And no its not bike shedding.... It is making a standard setup, work from there. [libdefaults] default_realm = AD.TAO.AT dns_lookup_realm = true < if you have multple REALM, else false. (default_realm = AD.TAO.AT) dns_lookup_kdc = true Checking file: /etc/nsswitch.conf passwd: files