diff --git a/mail-server.nix b/mail-server.nix
index 2b0d637..8397ebd 100644
--- a/mail-server.nix
+++ b/mail-server.nix
@@ -211,6 +211,7 @@ in {
             "base = ${cfg.ldap.base}"
             "user_filter = (&(objectClass=organizationalPerson)(cn=%n))"
             "pass_filter = (&(objectClass=organizationalPerson)(cn=%n))"
+            "pass_attrs = =user=%{ldap:cn}"
           ]);
         target-file = "/run/dovecot-secret/ldap.conf";
       };