multidomain: no roundcube login with kolab 3.2 and ldap_domain_* options in imapd.conf

[Jan Kowalsky]

Hi all,

while setting up a multi-domain environment with kolab 3.2 (debian wheezy) and 
cyrus 2.5 the configuration for cyrus as suggested in 

	http://docs.kolab.org/howtos/multi-domain.html

doesn't work for me.

I putted the following options to imapd.conf:

ldap_domain_base_dn: cn=kolab,cn=config
ldap_domain_filter: (&(objectclass=domainrelatedobject)(associateddomain=%s))
ldap_domain_name_attribute: associatedDomain
ldap_domain_scope: sub
ldap_domain_result_attribute: inetdomainbasedn

It tried also with an empty

ldap_domain_base_dn: ""

(because the documentation is not clear to me in this part)

I get in ldap error-log:

[20/Mar/2014:22:03:21 +0100] NSACLPlugin - acllas__client_match_URL: url 
[ldap:///dc=example,dc=org??sub?(objectclass=*)] scope is subtree but dn 
[dc=example,dc=org] is not a suffix of [uid=kolab-service,ou=special 
users,dc=primary-domain,dc=net]

Commenting out all ldap- and ptloader-options work's.

Does the "new" method works for other people?

Best regards.

Jan