WhyAllowing SASL authentification using LDAP as backend.

See also
Build information

Ensure the following options:

security/cyrus-sasl2
[ ] ALWAYSTRUE           Alwaystrue password verifier (discouraged)
[x] AUTHDAEMOND          Use of authdaemon
[x] ANONYMOUS            ANONYMOUS authentication
[x] CRAM                 CRAM-MD5 authentication
[x] DIGEST               DIGEST-MD5 authentication
[x] LOGIN                LOGIN authentication
[x] NTLM                 NTLM authentication
[x] OTP                  OTP authentication
[x] PLAIN                PLAIN authentication
[x] SCRAM                SCRAM authentication
security/cyrus-sasl2-saslauthd
[x] HTTPFORM             Enable HTTP form authentication
[x] OPENLDAP             Use OpenLDAP
[x] OPENLDAP_SASL        OpenLDAP client with SASL2 support

Configuration

Authentication is done (in this configuration) through the user mail address which is used as identifier.

ldap_servers: URI to access LDAP server
ldap_search_base: Branch to use as base for search
ldap_timeout: 10
ldap_filter: mail=%u@%r

Startup

saslauthd_enable="YES"
saslauthd_flags="-a ldap -c -t 30"