[bug]: Error Failed to verify address.

[DerDennisOP]

What happened?

I am using a normal openldap with yescrypt. This is the log:

When I try to send mail via smtp (or receive) I get errors.
Dec 19 21:00:32 auth slapd[562]: conn=2381 op=15 EXT oid=1.3.6.1.4.1.4203.1.11.3
Dec 19 21:00:32 auth slapd[562]: conn=2381 op=15 WHOAMI
Dec 19 21:00:32 auth slapd[562]: conn=2381 op=15 RESULT oid= err=0 qtime=0.000373 etime=0.001838 text=
Dec 19 21:00:32 auth slapd[562]: conn=2385 fd=15 ACCEPT from IP=10.0.0.8:45946 (IP=0.0.0.0:636)
Dec 19 21:00:32 auth slapd[562]: conn=2385 fd=15 TLS established tls_ssf=256 ssf=256 tls_proto=TLSv1.3 tls_cipher=TLS_AES_256_GCM_SHA384
Dec 19 21:00:32 auth slapd[562]: conn=2385 op=0 BIND dn="uid=xx,ou=users,dc=xx,dc=x" method=128
Dec 19 21:00:32 auth slapd[562]: conn=2385 op=0 BIND dn="uid=xx,ou=users,dc=xx,dc=x" mech=SIMPLE bind_ssf=0 ssf=256
Dec 19 21:00:32 auth slapd[562]: conn=2385 op=0 RESULT tag=97 err=0 qtime=0.000008 etime=0.028996 text=
Dec 19 21:00:32 auth slapd[562]: conn=2381 op=16 SRCH base="dc=xx,dc=x" scope=2 deref=0 filter="(&(objectClass=person)(isMemberOf=cn=mail-account,ou=groups,dc=xx,dc=x)(uid=xxxx))"
Dec 19 21:00:32 auth slapd[562]: conn=2381 op=16 SRCH attr=objectClass uid objectClass cn userPassword isMemberOf mail
Dec 19 21:00:32 auth slapd[562]: conn=2381 op=16 SEARCH RESULT tag=101 err=0 qtime=0.000013 etime=0.000628 nentries=1 text=
Dec 19 21:00:32 auth slapd[562]: conn=2381 op=17 SRCH base="cn=admins,ou=groups,dc=x,dc=xx" scope=0 deref=0 filter="(objectClass=*)"
Dec 19 21:00:32 auth slapd[562]: conn=2381 op=17 SRCH attr=uid
Dec 19 21:00:32 auth slapd[562]: conn=2381 op=17 SEARCH RESULT tag=101 err=0 qtime=0.000005 etime=0.000068 nentries=1 text=
Dec 19 21:00:32 auth slapd[562]: conn=2381 op=18 SRCH base="cn=a-admins,ou=groups,dc=x,dc=xx" scope=0 deref=0 filter="(objectClass=*)"
Dec 19 21:00:32 auth slapd[562]: conn=2381 op=18 SRCH attr=uid
Dec 19 21:00:32 auth slapd[562]: conn=2381 op=18 SEARCH RESULT tag=101 err=0 qtime=0.000006 etime=0.000063 nentries=1 text=
Dec 19 21:00:32 auth slapd[562]: conn=2385 fd=15 closed (connection lost)
Dec 19 21:00:32 auth slapd[562]: conn=2381 op=19 SRCH base="cn=a-users,ou=groups,dc=x,dc=xx" scope=0 deref=0 filter="(objectClass=*)"
Dec 19 21:00:32 auth slapd[562]: conn=2381 op=19 SRCH attr=uid
Dec 19 21:00:32 auth slapd[562]: conn=2381 op=19 SEARCH RESULT tag=101 err=0 qtime=0.000007 etime=0.000050 nentries=1 text=
Dec 19 21:00:32 auth slapd[562]: conn=2381 op=20 SRCH base="cn=b-admins,ou=groups,dc=x,dc=xx" scope=0 deref=0 filter="(objectClass=*)"
Dec 19 21:00:32 auth slapd[562]: conn=2381 op=20 SRCH attr=uid
Dec 19 21:00:32 auth slapd[562]: conn=2381 op=20 SEARCH RESULT tag=101 err=0 qtime=0.000004 etime=0.000045 nentries=1 text=
Dec 19 21:00:32 auth slapd[562]: conn=2381 op=21 SRCH base="cn=b-users,ou=groups,dc=x,dc=xx" scope=0 deref=0 filter="(objectClass=*)"
Dec 19 21:00:32 auth slapd[562]: conn=2381 op=21 SRCH attr=uid
Dec 19 21:00:32 auth slapd[562]: conn=2381 op=21 SEARCH RESULT tag=101 err=0 qtime=0.000003 etime=0.000050 nentries=1 text=
Dec 19 21:00:32 auth slapd[562]: conn=2381 op=22 SRCH base="cn=c-admins,ou=groups,dc=x,dc=xx" scope=0 deref=0 filter="(objectClass=*)"
Dec 19 21:00:32 auth slapd[562]: conn=2381 op=22 SRCH attr=uid
Dec 19 21:00:32 auth slapd[562]: conn=2381 op=22 SEARCH RESULT tag=101 err=0 qtime=0.000007 etime=0.000046 nentries=1 text=
Dec 19 21:00:32 auth slapd[562]: conn=2381 op=23 SRCH base="cn=c-users,ou=groups,dc=x,dc=xx" scope=0 deref=0 filter="(objectClass=*)"
Dec 19 21:00:32 auth slapd[562]: conn=2381 op=23 SRCH attr=uid
Dec 19 21:00:32 auth slapd[562]: conn=2381 op=23 SEARCH RESULT tag=101 err=0 qtime=0.000007 etime=0.000046 nentries=1 text=
Dec 19 21:00:32 auth slapd[562]: conn=2381 op=24 SRCH base="cn=mail-account,ou=groups,dc=x,dc=xx" scope=0 deref=0 filter="(objectClass=*)"
Dec 19 21:00:32 auth slapd[562]: conn=2381 op=24 SRCH attr=uid
Dec 19 21:00:32 auth slapd[562]: conn=2381 op=24 SEARCH RESULT tag=101 err=0 qtime=0.000005 etime=0.000052 nentries=1 text=
Dec 19 21:00:32 auth slapd[562]: conn=2381 op=25 SRCH base="cn=d-users,ou=groups,dc=xx,dc=xx" scope=0 deref=0 filter="(objectClass=*)"
Dec 19 21:00:32 auth slapd[562]: conn=2381 op=25 SRCH attr=uid
Dec 19 21:00:32 auth slapd[562]: conn=2381 op=25 SEARCH RESULT tag=101 err=0 qtime=0.000010 etime=0.000058 nentries=1 text=
Dec 19 21:00:32 auth slapd[562]: conn=2381 op=26 SRCH base="cn=e-users,ou=groups,dc=x,dc=xx" scope=0 deref=0 filter="(objectClass=*)"
Dec 19 21:00:32 auth slapd[562]: conn=2381 op=26 SRCH attr=uid
Dec 19 21:00:32 auth slapd[562]: conn=2381 op=26 SEARCH RESULT tag=101 err=0 qtime=0.000009 etime=0.000059 nentries=1 text=
Dec 19 21:00:32 auth slapd[562]: conn=2381 op=27 EXT oid=1.3.6.1.4.1.4203.1.11.3
Dec 19 21:00:32 auth slapd[562]: conn=2381 op=27 WHOAMI
Dec 19 21:00:32 auth slapd[562]: conn=2381 op=27 RESULT oid= err=0 qtime=0.000022 etime=0.000089 text=

How can we reproduce the problem?

Curretly I don't really know why the error is occuring. Maybe because I am using yescrypt?

Version

v0.10.x

What database are you using?

PostgreSQL

What blob storage are you using?

PostgreSQL

Where is your directory located?

LDAP

What operating system are you using?

Linux

Relevant log output

Dec 19 21:24:22 mail stalwart-mail[579]: 2024-12-19T20:24:22Z TRACE Data store iteration operation (store.data-iterate) elapsed = 0ms
Dec 19 21:24:22 mail stalwart-mail[579]: 2024-12-19T20:24:22Z INFO Authentication successful (auth.success) listenerId = "submissions", localPort = 465, remoteIp = 198.167.207.176, remotePort = 44244, accountName = "dennis", accountId = 68
Dec 19 21:24:22 mail stalwart-mail[579]: 2024-12-19T20:24:22Z TRACE Expression evaluation result (eval.result) listenerId = "submissions", localPort = 465, remoteIp = 198.167.207.176, remotePort = 44244, id = "session.extensions.expn", result = "Integer(1)"
Dec 19 21:24:22 mail stalwart-mail[579]: 2024-12-19T20:24:22Z TRACE Expression evaluation result (eval.result) listenerId = "submissions", localPort = 465, remoteIp = 198.167.207.176, remotePort = 44244, id = "session.extensions.vrfy", result = "Integer(1)"
Dec 19 21:24:22 mail stalwart-mail[579]: 2024-12-19T20:24:22Z TRACE Expression evaluation result (eval.result) listenerId = "submissions", localPort = 465, remoteIp = 198.167.207.176, remotePort = 44244, id = "session.auth.must-match-sender", result = "Integer(1)"
Dec 19 21:24:22 mail stalwart-mail[579]: 2024-12-19T20:24:22Z TRACE Raw SMTP output sent (smtp.raw-output) listenerId = "submissions", localPort = 465, remoteIp = 198.167.207.176, remotePort = 44244, size = 37, contents = "235 2.7.0 Authentication succeeded.\r\n"
Dec 19 21:24:22 mail stalwart-mail[579]: 2024-12-19T20:24:22Z TRACE Raw SMTP input received (smtp.raw-input) listenerId = "submissions", localPort = 465, remoteIp = 198.167.207.176, remotePort = 44244, size = 62, contents = "MAIL FROM:<[email protected]> BODY=8BITMIME SIZE=5107\r\n"
Dec 19 21:24:22 mail stalwart-mail[579]: 2024-12-19T20:24:22Z TRACE Expression evaluation result (eval.result) listenerId = "submissions", localPort = 465, remoteIp = 198.167.207.176, remotePort = 44244, id = "session.mail.is-allowed", result = "Integer(1)"
Dec 19 21:24:22 mail stalwart-mail[579]: 2024-12-19T20:24:22Z TRACE Expression evaluation result (eval.result) listenerId = "submissions", localPort = 465, remoteIp = 198.167.207.176, remotePort = 44244, id = "session.mail.script", result =
Dec 19 21:24:22 mail stalwart-mail[579]: 2024-12-19T20:24:22Z TRACE Expression evaluation result (eval.result) listenerId = "submissions", localPort = 465, remoteIp = 198.167.207.176, remotePort = 44244, id = "session.mail.rewrite", result =
Dec 19 21:24:22 mail stalwart-mail[579]: 2024-12-19T20:24:22Z TRACE Expression evaluation result (eval.result) listenerId = "submissions", localPort = 465, remoteIp = 198.167.207.176, remotePort = 44244, id = "session.data.limits.size", result = "Integer(104857600)"
Dec 19 21:24:22 mail stalwart-mail[579]: 2024-12-19T20:24:22Z INFO SMTP MAIL FROM command (smtp.mail-from) listenerId = "submissions", localPort = 465, remoteIp = 198.167.207.176, remotePort = 44244, from = "[email protected]"
Dec 19 21:24:22 mail stalwart-mail[579]: 2024-12-19T20:24:22Z TRACE Expression evaluation result (eval.result) listenerId = "submissions", localPort = 465, remoteIp = 198.167.207.176, remotePort = 44244, id = "session.rcpt.errors.total", result = "Integer(5)"
Dec 19 21:24:22 mail stalwart-mail[579]: 2024-12-19T20:24:22Z TRACE Expression evaluation result (eval.result) listenerId = "submissions", localPort = 465, remoteIp = 198.167.207.176, remotePort = 44244, id = "session.rcpt.errors.wait", result = "Integer(5000)"
Dec 19 21:24:22 mail stalwart-mail[579]: 2024-12-19T20:24:22Z TRACE Expression evaluation result (eval.result) listenerId = "submissions", localPort = 465, remoteIp = 198.167.207.176, remotePort = 44244, id = "session.rcpt.max-recipients", result = "Integer(100)"
Dec 19 21:24:22 mail stalwart-mail[579]: 2024-12-19T20:24:22Z TRACE Expression evaluation result (eval.result) listenerId = "submissions", localPort = 465, remoteIp = 198.167.207.176, remotePort = 44244, id = "session.extensions.dsn", result = "Integer(1)"
Dec 19 21:24:22 mail stalwart-mail[579]: 2024-12-19T20:24:22Z TRACE Expression evaluation result (eval.result) listenerId = "submissions", localPort = 465, remoteIp = 198.167.207.176, remotePort = 44244, id = "session.data.limits.size", result = "Integer(104857600)"
Dec 19 21:24:22 mail stalwart-mail[579]: 2024-12-19T20:24:22Z TRACE Raw SMTP output sent (smtp.raw-output) listenerId = "submissions", localPort = 465, remoteIp = 198.167.207.176, remotePort = 44244, size = 14, contents = "250 2.1.0 OK\r\n"
Dec 19 21:24:22 mail stalwart-mail[579]: 2024-12-19T20:24:22Z TRACE Raw SMTP input received (smtp.raw-input) listenerId = "submissions", localPort = 465, remoteIp = 198.167.207.176, remotePort = 44244, size = 28, contents = "RCPT TO:<[email protected]>\r\n"
Dec 19 21:24:22 mail stalwart-mail[579]: 2024-12-19T20:24:22Z TRACE Expression evaluation result (eval.result) listenerId = "submissions", localPort = 465, remoteIp = 198.167.207.176, remotePort = 44244, id = "session.rcpt.script", result =
Dec 19 21:24:22 mail stalwart-mail[579]: 2024-12-19T20:24:22Z TRACE Expression evaluation result (eval.result) listenerId = "submissions", localPort = 465, remoteIp = 198.167.207.176, remotePort = 44244, id = "session.rcpt.directory", result = "String("*")"
Dec 19 21:24:22 mail stalwart-mail[579]: 2024-12-19T20:24:22Z ERROR LDAP error (store.ldap-error) listenerId = "submissions", localPort = 465, remoteIp = 198.167.207.176, remotePort = 44244, reason = "filter parse error", causedBy = crates/directory/src/backend/ldap/lookup.rs:398, causedBy = crates/directory/src/core/dispatch.rs:64, causedBy = crates/smtp/src/inbound/rcpt.rs:258, details = Failed to verify address.
Dec 19 21:24:22 mail stalwart-mail[579]: 2024-12-19T20:24:22Z TRACE Raw SMTP output sent (smtp.raw-output) listenerId = "submissions", localPort = 465, remoteIp = 198.167.207.176, remotePort = 44244, size = 50, contents = "451 4.4.3 Unable to verify address at this time.\r\n"
Dec 19 21:24:22 mail stalwart-mail[579]: 2024-12-19T20:24:22Z TRACE Raw SMTP input received (smtp.raw-input) listenerId = "submissions", localPort = 465, remoteIp = 198.167.207.176, remotePort = 44244, size = 0, contents = ""
Dec 19 21:24:22 mail stalwart-mail[579]: 2024-12-19T20:24:22Z TRACE Network connection closed (network.closed) listenerId = "submissions", localPort = 465, remoteIp = 198.167.207.176, remotePort = 44244, causedBy = crates/smtp/src/inbound/spawn.rs:227
Dec 19 21:24:22 mail stalwart-mail[579]: 2024-12-19T20:24:22Z DEBUG SMTP connection ended (smtp.connection-end) listenerId = "submissions", localPort = 465, remoteIp = 198.167.207.176, remotePort = 44244, elapsed = 825ms

Code of Conduct

• I agree to follow this project's Code of Conduct

[mdecimus]

According to the error message, it looks like the LDAP query you are using is invalid.

[DerDennisOP]

yes, but I can't change the query. I don't know if they query is correct, but I also cant change anything in the query.

Dec 19 21:00:32 auth slapd[562]: conn=2381 op=24 SRCH base="cn=mail-account,ou=groups,dc=x,dc=xx" scope=0 deref=0 filter="(objectClass=*)"
Dec 19 21:00:32 auth slapd[562]: conn=2381 op=24 SRCH attr=uid

afaik there is no uid in cn=mail-account,ou=groups,dc=x,dc=xx, but i can't modifiy the query, there is no option to change the base.

[DerDennisOP]

Update your mail-server ;)