On Sun, 2012-05-13 at 13:21 +0200, Christian Rößner wrote:
> May 13 13:03:20 mx0 dovecot: auth: Error: auth worker: Aborted request:
> Lookup timed out
> May 13 13:03:21 mx0 dovecot: auth-worker(26753): Error: LDAP:
> ldap_start_tls_s() failed: Connect error
> May 13 13:03:21 mx0 dovecot: auth-worker(26753): Error: LDAP:
> ldap_start_tls_s() failed: Can't contact LDAP server
>
> Dovecot itself works. Only doveadm does not.
User iteration is done via auth-worker process, because it can take a
long time. Regular passdb/userdb lookups are done via auth process,
because they are fast. So:
> service auth-worker {
> unix_listener auth-worker {
> user = vmail
> }
> user = vmail
> }
> service auth {
> extra_groups = ssl-cert
> unix_listener auth-userdb {
> mode = 0600
> user = vmail
> }
> user = vmail
> }
I guess you need to add extra_groups=ssl-cert to auth-worker as well.