ITS#9121 fix filtering of dyngroups with memberof

diff --git a/servers/slapd/overlays/dynlist.c b/servers/slapd/overlays/dynlist.c
index 6c9f9afca0226208e21434c7c3f41e259d601f80..613b568b5105c55c183e9a123c64f78b8ef92eb1 100644 (file)
--- a/servers/slapd/overlays/dynlist.c
+++ b/servers/slapd/overlays/dynlist.c
@@ -964,6 +964,10 @@ dynlist_search2resp( Operation *op, SlapReply *rs )
                if ( dyn ) {
                        dyn->dy_seen = 1;
                        rc = dynlist_prepare_entry( op, rs, dyn->dy_dli );
+                       if ( ds->ds_origfilter && test_filter( op, rs->sr_entry, ds->ds_origfilter ) != LDAP_COMPARE_TRUE ) {
+                               rs_flush_entry( op, rs, NULL );
+                               rc = LDAP_SUCCESS;
+                       }
                        return rc;
                } else {
                        TAvlnode *ptr;