diff --git a/mail-server.nix b/mail-server.nix
index db2f5db..c3e7b71 100644
--- a/mail-server.nix
+++ b/mail-server.nix
@@ -245,7 +245,7 @@ in {
             "auth_bind = yes"
             "auth_bind_userdn = cn=%u,${cfg.ldap.member-ou},${cfg.ldap.base}"
             "base = ${cfg.ldap.base}"
-            "user_attrs = =user=%{ldap:cn}"
+            "user_filter = (&(objectClass=user)(cn=%n))"
           ]);
         target-file = "/run/dovecot-secret/ldap.conf";
       };