ldapsearch -H ldap://pdc1.domain.lan -D "cn=test1,cn=users,dc=domain,dc=lan" -W -s base -b "" supportedSASLMechanisms

ldap_bind: Strong(er) authentication required (8)
	additional info: BindSimple: Transport encryption required.

I spent a lot of time-solving this problem.

Here is my solution:

To fix it, you need to copy /var/lib/samba/private/tls/ca.pem from samba ad server to centos 8 mail server folder /etc/pki/ca-trust/source/anchors/ and run update-ca-trust.

Then comment string beginning at TLS_CACERT in file /etc/openldap/ldap.conf.

Thereafter we can access to ldaps using simple authentication

ldapsearch -H ldaps://pdc1.domain.lan:636 -x -D "cn=test1,cn=users,dc=domain,dc=lan" -W -s base -b "" supportedSASLMechanisms

In postfix files ad_sender_login_maps.cf, ad_virtual_mailbox_maps.cf, and ad_virtual_group_maps.cf need modify lines

 
server_host     = ldaps://pdc1.domain.lan:636
#server_port     = 636 

In dovecot file dovecot-ldap.conf need modify this lines.

uris            = ldaps://pdc1.domain.lan:636
auth_bind       = yes
dn              = vmail@domain.lan

Everything should work now.

Many thanks..:)

you need to change auth part in /etc/sogo/sogo.conf

https://github.com/lemassykoi/temp/blob/master/sogo.conf

Hi, how did you get iRedMail/SOGo integrated with AD users please ?
thanks

Hi, how did you get iRedMail/SOGo integrated with AD users please ?
thanks