LDAP not finding local domains

[jheretic]

I have Stalwart set up to use LDAP as the external directory, using bind authentication. I can login via IMAP using credentials from LDAP users, but when I try and send a message to one of those accounts from an outside address I get a 550 5.1.2 Relay not allowed error. The trace log seems to show that message processing gets to the RCPT TO stage. The logs from my LDAP server seem to suggest that the bind DN is able to authenticate properly against the LDAP server. It seems like from all this that Stalwart isn't able to look up the local domains from the LDAP server.

I could have sworn I had this working at one point. Any suggestions for continued troubleshooting?

[jheretic]

Okay I figured out what it was. I'm using LLDAP, and (according to lldap/lldap#763) it doesn't support doing substring matches in attributes that are multiple-value strings (like in my case, the custom mailAlias attribute). I needed to remove the mailAlias=*@? match from the LDAP local domains lookup filter and now it works (using just the domains in the mail attribute to determine local domains). Hopefully this will be helpful for anyone else trying to use Stalwart with LLDAP.