reading this: http://www.openldap.org/faq/data/cache/1133.html - do I read this correctly that the set syntax can also be employed in search filters? The reason I ask is because Mark is listing LDAP URIs and this sentence: "The LDAP search corresponding to the URI's DN, attributes, scope and filter is performed, and all the matching entries are dereferenced."