On 29.3.2012, at 13.24, Christian Rößner wrote: > I figured out that Dovecot does not honer secondary groups with > auth/auth-worker (??), if doing LDAP/TLS stuff. I had to use file system acls > to add the user "vmail" to /etc/ssl/private and to the corresponding key file:
service auth { extra_groups = any groups you want auth process to have } Don't give secondary groups to any Dovecot related users.