john.bowers@quest.com wrote:

Full_Name: John Bowers Version: 2.3.27 OS: Suse Linux 9.1 URL: ftp://ftp.openldap.org/incoming/john-bowers-06-08-23.patch Submission from: (NULL) (192.41.88.6)

The ldap_search code uses ldap_pvt_put_filter() to add the search filter to the search request. Certain (if I am not enirely mistaken) invalid search filters are successfully added by the ldap_pvt_put_filter() code. An example of this type of search filter follows:

"(objectclass=group)(cn=test)"

I've committed a simpler fix to CVS HEAD.