Does slapd/acl.c:acl_set_cb_gather() make sense? It loops through the search attributes and sets bvalsp to each recognized attribute in turn without using it for anything else. After the loop it uses the final recognized attribute in slap_set_join(), thus ignoring previous attrs.

AFAIR it should join all attribute values. Probably, the subsequent slap_set_join() should be within the loop, with appropriate changes to its arguments, if needed.

p.

Ing. Pierangelo Masarati OpenLDAP Core Team

SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it --------------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Email: pierangelo.masarati@sys-net.it ---------------------------------------