Stalwart Support Active Directory (Server 2022) for LDAP Authentication?

[theprez1980]

Does Stalwart Mail support authenticating against Windows Server 2022 LDAP/Active Directory?

It appears it's unable to obtain the password/password hash properly: "contents = "TAG1 NO [AUTHENTICATIONFAILED] Authentication failed\r\n""

My understanding is the userpassword, password or unicodepwd elements are not exposed as they are in a Linux LDAP environment.

I've tried to configure Stalwart using Binding -> Bind DN of an Administrator Service Account with the proper and correct Bind Secret with no luck. Also have tried toggling "Enable Bind Auth" but no luck there.

The output from the Stalwart log does show a successfully LDAP query, but seems to fail at authenticating as shown here:

2025-02-19T01:15:12Z DEBUG IMAP connection started (imap.connection-start) listenerId = "imaptls", localPort = 10993, remoteIp = 172.16.50.2, remotePort = 32924
2025-02-19T01:15:12Z TRACE Raw IMAP input received (imap.raw-input) listenerId = "imaptls", localPort = 10993, remoteIp = 172.16.50.2, remotePort = 32924, size = 70, contents = "TAG1 AUTHENTICATE PLAIN AHRlc3RAdGhlcHJjhuihiudd45uZS5jb20ATHQyMTA1NGEh\r\n"
2025-02-19T01:15:12Z TRACE LDAP query executed (store.ldap-query) details = "(&(objectClass=user)([email protected]))", result = [["objectClass", "top, person, organizationalPerson, user"], ["displayName", "test"], ["mail", "[email protected]"], ["sAMAccountName", "test"]]
2025-02-19T01:15:12Z TRACE Write batch operation (store.data-write) elapsed = 0ms, total = 2
2025-02-19T01:15:12Z TRACE Write batch operation (store.data-write) elapsed = 0ms, total = 2
2025-02-19T01:15:12Z DEBUG Authentication failed (auth.failed) listenerId = "imaptls", localPort = 10993, remoteIp = 172.16.50.2, remotePort = 32924, remoteIp = 172.16.50.2, accountName = "[email protected]", id = "TAG1"
2025-02-19T01:15:12Z TRACE Raw IMAP output sent (imap.raw-output) listenerId = "imaptls", localPort = 10993, remoteIp = 172.16.50.2, remotePort = 32924, size = 54, contents = "TAG1 NO [AUTHENTICATIONFAILED] Authentication failed\r\n"

Any ideas or working configurations to share?

Thanks