Thanks Brad! Adding this to my 10-director.conf fixed it
passdb { driver = static args = nopassword=y proxy=y } userdb { driver = static args = uid=dovenull gid=dovenull home=/var/run/dovecot/empty } Do I still need "someAttribute=proxy" in pass_attrs? If I want to use proxy_maybe, is the LDAP value changed from "proxy" to "proxy_maybe" or in pass_attrs "someAttribute=proxy_maybe"? I'll take a look at poolmon for node failures.