@@ -338,12 +338,12 @@ If you're using DN template, there is no LDAP lookup that returns fields, so
338338
339339Usually your LDAP database also contains the [[ link,userdb]] .
340340
341- If your home directory can be specified with a template and you're using
342- only a single UID and GID, you should use [[ link,auth_staticdb ]]
343- instead to avoid an unnecessary LDAP lookup. You can also use
344- [[ link,auth_prefetch]] to avoid the userdb LDAP lookup.
341+ If your home directory can be specified with a template, you're using only a
342+ single UID and GID, and you don't need any other user-specific fields, you
343+ should use [[ link,userdb_static ]] instead to avoid an unnecessary LDAP lookup.
344+ You can also use [[ link,auth_prefetch]] to avoid the userdb LDAP lookup.
345345
346- Userdb lookups are always done using the default DN ( ` dn ` setting)
346+ Userdb lookups are always done using the [[ setting,ldap_auth_dn ]]
347347bind. It's not possible to do the lookup using the user's DN (remember
348348that e.g. [[ link,lda]] or [[ link,lmtp]] needs to do userdb lookups
349349without knowing the user's password).
@@ -367,7 +367,9 @@ userdb ldap {
367367}
368368```
369369
370- # For using doveadm -A:
370+ ### User Iteration
371+
372+ For using ` doveadm -A ` or ` -u ` with wildcards:
371373```
372374userdb ldap {
373375 iterate_filter = (objectClass=posixAccount)
0 commit comments