ldap: replace pass_attrs option with password attr option

The passdb only checks password access, so instead of customizing the whole pass_attrs setting we now allow customization of the password field used.
2026-03-15 18:44:31 +01:00
parent 091eda1ed2
commit af480dba87
2 changed files with 15 additions and 15 deletions
@@ -84,9 +84,7 @@ let
          lib.optionalString (cfg.indexDir != null) ":INDEX=${cfg.indexDir}/ldap/%{ldap:${ldapUuidAttribute}}"
        }
      user_filter = ${cfg.ldap.dovecot.userFilter}
-      ${lib.optionalString (cfg.ldap.dovecot.passAttrs != "") ''
-        pass_attrs = ${cfg.ldap.dovecot.passAttrs}
-      ''}
+      pass_attrs = ${cfg.ldap.attributes.password}=password
      pass_filter = ${cfg.ldap.dovecot.passFilter}
    '';
  };