fixes for start

Setup-ByteTrail-AD.ps1

@@ -58,12 +58,18 @@ try {
     exit 1
 }
 
-# Quick-Write-Test: Versuche ein Dummy-Attribut zu lesen/schreiben
+# Quick-Write-Test: Versuche ein Dummy-Objekt zu erstellen und loeschen
 Write-Host "  [..] Schreibtest..." -ForegroundColor Gray
 try {
     $testOUName = "_ByteTrailSetupTest"
     $testOU = "OU=$testOUName,$DomainDN"
+    # Falls vom letzten Lauf noch vorhanden, erst loeschen
+    try {
+        Set-ADOrganizationalUnit -Identity $testOU -ProtectedFromAccidentalDeletion $false -ErrorAction Stop
+        Remove-ADOrganizationalUnit -Identity $testOU -Confirm:$false -Recursive -ErrorAction Stop
+    } catch { }
     New-ADOrganizationalUnit -Name $testOUName -Path $DomainDN -ErrorAction Stop
+    Set-ADOrganizationalUnit -Identity $testOU -ProtectedFromAccidentalDeletion $false -ErrorAction Stop
     Remove-ADOrganizationalUnit -Identity $testOU -Confirm:$false -Recursive -ErrorAction Stop
     Write-Host "  [OK] Schreibzugriff funktioniert" -ForegroundColor Green
 } catch {

mailserver.env

@@ -464,15 +464,15 @@ LDAP_SERVER_HOST=ldap://10.10.10.10
 
 # empty => ou=people,dc=domain,dc=com
 # => e.g. LDAP_SEARCH_BASE=dc=mydomain,dc=local
-LDAP_SEARCH_BASE=DC=bytetrail,DC=local
+LDAP_SEARCH_BASE=DC=byte,DC=trail
 
 # empty => cn=admin,dc=domain,dc=com
 # => take a look at examples of SASL_LDAP_BIND_DN
-LDAP_BIND_DN=CN=Mailserver Service Account,OU=Server,DC=bytetrail,DC=local
+LDAP_BIND_DN=CN=Mailserver Service Account,OU=Server,DC=byte,DC=trail
 
 # empty** => admin
 # => Specify the password to bind against ldap
-LDAP_BIND_PW=ByteTrail123456!
+LDAP_BIND_PW=Mail$3rv!ceAcc2026
 
 # e.g. `"(&(mail=%s)(mailEnabled=TRUE))"`
 # => Specify how ldap should be asked for users