reading this: http://www.openldap.org/faq/data/cache/1133.html - do I read this correctly that the set syntax can also be employed in search filters? The reason I ask is because Mark is listing LDAP URIs and this sentence: "The LDAP search corresponding to the URI's DN, attributes, scope and filter is performed, and all the matching entries are dereferenced."

I'm unsure because the Admin Guide for 2.4 only mentions sets in the context of ACLs, and slapd.access(5) states that it's "undocumented".

Thanks for any clarification,