]> git.sur5r.net Git - openldap/blobdiff - servers/slapd/back-sql/search.c
add extra level of parens only if required
[openldap] / servers / slapd / back-sql / search.c
index b5fefff7ff210bf6023bfacb77c01f773ca2cb5f..56538aa4a1858f4285aec174f0b89bf5cb66a25d 100644 (file)
@@ -1,10 +1,21 @@
-/*
- *      Copyright 1999, Dmitry Kovalev <mit@openldap.org>, All rights reserved.
+/* $OpenLDAP$ */
+/* This work is part of OpenLDAP Software <http://www.openldap.org/>.
  *
- *      Redistribution and use in source and binary forms are permitted only
- *      as authorized by the OpenLDAP Public License.  A copy of this
- *      license is available at http://www.OpenLDAP.org/license.html or
- *      in file LICENSE in the top-level directory of the distribution.
+ * Copyright 1999-2004 The OpenLDAP Foundation.
+ * Portions Copyright 1999 Dmitry Kovalev.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted only as authorized by the OpenLDAP
+ * Public License.
+ *
+ * A copy of this license is available in the file LICENSE in the
+ * top-level directory of the distribution or, alternatively, at
+ * <http://www.OpenLDAP.org/license.html>.
+ */
+/* ACKNOWLEDGEMENTS:
+ * This work was initially developed by Dmitry Kovalev for inclusion
+ * by OpenLDAP Software.
  */
 
 #include "portable.h"
 
 static int backsql_process_filter( backsql_srch_info *bsi, Filter *f );
 
+static int backsql_process_filter_attr( backsql_srch_info *bsi, Filter *f, 
+               backsql_at_map_rec *at );
+
 static int
 backsql_attrlist_add( backsql_srch_info *bsi, AttributeDescription *ad )
 {
        int             n_attrs = 0;
        AttributeName   *an = NULL;
 
-       if ( bsi->attrs == NULL ) {
+       if ( bsi->bsi_attrs == NULL ) {
                return 1;
        }
 
@@ -42,13 +56,13 @@ backsql_attrlist_add( backsql_srch_info *bsi, AttributeDescription *ad )
         * clear the list (retrieve all attrs)
         */
        if ( ad == NULL ) {
-               ch_free( bsi->attrs );
-               bsi->attrs = NULL;
+               ch_free( bsi->bsi_attrs );
+               bsi->bsi_attrs = NULL;
                return 1;
        }
 
-       for ( ; bsi->attrs[ n_attrs ].an_name.bv_val; n_attrs++ ) {
-               an = &bsi->attrs[ n_attrs ];
+       for ( ; bsi->bsi_attrs[ n_attrs ].an_name.bv_val; n_attrs++ ) {
+               an = &bsi->bsi_attrs[ n_attrs ];
                
                Debug( LDAP_DEBUG_TRACE, "==>backsql_attrlist_add(): "
                        "attribute '%s' is in list\n", 
@@ -65,7 +79,7 @@ backsql_attrlist_add( backsql_srch_info *bsi, AttributeDescription *ad )
        Debug( LDAP_DEBUG_TRACE, "==>backsql_attrlist_add(): "
                "adding '%s' to list\n", ad->ad_cname.bv_val, 0, 0 );
 
-       an = (AttributeName *)ch_realloc( bsi->attrs,
+       an = (AttributeName *)ch_realloc( bsi->bsi_attrs,
                        sizeof( AttributeName ) * ( n_attrs + 2 ) );
        if ( an == NULL ) {
                return -1;
@@ -76,7 +90,7 @@ backsql_attrlist_add( backsql_srch_info *bsi, AttributeDescription *ad )
        an[ n_attrs + 1 ].an_name.bv_val = NULL;
        an[ n_attrs + 1 ].an_name.bv_len = 0;
 
-       bsi->attrs = an;
+       bsi->bsi_attrs = an;
        
        return 1;
 }
@@ -84,43 +98,38 @@ backsql_attrlist_add( backsql_srch_info *bsi, AttributeDescription *ad )
 void
 backsql_init_search(
        backsql_srch_info       *bsi, 
-       backsql_info            *bi,
-       struct berval           *nbase, 
+       struct berval           *base, 
        int                     scope, 
        int                     slimit,
        int                     tlimit,
        time_t                  stoptime, 
        Filter                  *filter, 
        SQLHDBC                 dbh,
-       BackendDB               *be, 
-       Connection              *conn, 
        Operation               *op,
        AttributeName           *attrs )
 {
        AttributeName           *p;
        
-       bsi->base_dn = nbase;
-       bsi->scope = scope;
-       bsi->slimit = slimit;
-       bsi->tlimit = tlimit;
-       bsi->filter = filter;
-       bsi->dbh = dbh;
-       bsi->be = be;
-       bsi->conn = conn;
-       bsi->op = op;
+       bsi->bsi_base_dn = base;
+       bsi->bsi_scope = scope;
+       bsi->bsi_slimit = slimit;
+       bsi->bsi_tlimit = tlimit;
+       bsi->bsi_filter = filter;
+       bsi->bsi_dbh = dbh;
+       bsi->bsi_op = op;
        bsi->bsi_flags = 0;
 
        /*
         * handle "*"
         */
        if ( attrs == NULL || an_find( attrs, &AllUser ) ) {
-               bsi->attrs = NULL;
+               bsi->bsi_attrs = NULL;
 
        } else {
-               bsi->attrs = (AttributeName *)ch_calloc( 1, 
+               bsi->bsi_attrs = (AttributeName *)ch_calloc( 1, 
                                sizeof( AttributeName ) );
-               bsi->attrs[ 0 ].an_name.bv_val = NULL;
-               bsi->attrs[ 0 ].an_name.bv_len = 0;
+               bsi->bsi_attrs[ 0 ].an_name.bv_val = NULL;
+               bsi->bsi_attrs[ 0 ].an_name.bv_len = 0;
                
                for ( p = attrs; p->an_name.bv_val; p++ ) {
                        /*
@@ -138,25 +147,25 @@ backsql_init_search(
                }
        }
 
-       bsi->abandon = 0;
-       bsi->id_list = NULL;
-       bsi->n_candidates = 0;
-       bsi->stoptime = stoptime;
-       bsi->bi = bi;
-       bsi->sel.bv_val = NULL;
-       bsi->sel.bv_len = 0;
-       bsi->sel_len = 0;
-       bsi->from.bv_val = NULL;
-       bsi->from.bv_len = 0;
-       bsi->from_len = 0;
-       bsi->join_where.bv_val = NULL;
-       bsi->join_where.bv_len = 0;
-       bsi->jwhere_len = 0;
-       bsi->flt_where.bv_val = NULL;
-       bsi->flt_where.bv_len = 0;
-       bsi->fwhere_len = 0;
-
-       bsi->status = LDAP_SUCCESS;
+       bsi->bsi_abandon = 0;
+       bsi->bsi_id_list = NULL;
+       bsi->bsi_n_candidates = 0;
+       bsi->bsi_stoptime = stoptime;
+       bsi->bsi_sel.bb_val.bv_val = NULL;
+       bsi->bsi_sel.bb_val.bv_len = 0;
+       bsi->bsi_sel.bb_len = 0;
+       bsi->bsi_from.bb_val.bv_val = NULL;
+       bsi->bsi_from.bb_val.bv_len = 0;
+       bsi->bsi_from.bb_len = 0;
+       bsi->bsi_join_where.bb_val.bv_val = NULL;
+       bsi->bsi_join_where.bb_val.bv_len = 0;
+       bsi->bsi_join_where.bb_len = 0;
+       bsi->bsi_flt_where.bb_val.bv_val = NULL;
+       bsi->bsi_flt_where.bb_val.bv_len = 0;
+       bsi->bsi_flt_where.bb_len = 0;
+       bsi->bsi_filter_oc = NULL;
+
+       bsi->bsi_status = LDAP_SUCCESS;
 }
 
 static int
@@ -168,7 +177,7 @@ backsql_process_filter_list( backsql_srch_info *bsi, Filter *f, int op )
                return 0;
        }
 
-       backsql_strfcat( &bsi->flt_where, &bsi->fwhere_len, "c", '(' /* ) */  );
+       backsql_strfcat( &bsi->bsi_flt_where, "c", '(' /* ) */  );
 
        while ( 1 ) {
                res = backsql_process_filter( bsi, f );
@@ -187,20 +196,20 @@ backsql_process_filter_list( backsql_srch_info *bsi, Filter *f, int op )
 
                switch ( op ) {
                case LDAP_FILTER_AND:
-                       backsql_strfcat( &bsi->flt_where, &bsi->fwhere_len, "l",
+                       backsql_strfcat( &bsi->bsi_flt_where, "l",
                                        (ber_len_t)sizeof( " AND " ) - 1, 
                                                " AND " );
                        break;
 
                case LDAP_FILTER_OR:
-                       backsql_strfcat( &bsi->flt_where, &bsi->fwhere_len, "l",
+                       backsql_strfcat( &bsi->bsi_flt_where, "l",
                                        (ber_len_t)sizeof( " OR " ) - 1,
                                                " OR " );
                        break;
                }
        }
 
-       backsql_strfcat( &bsi->flt_where, &bsi->fwhere_len, "c", /* ( */ ')' );
+       backsql_strfcat( &bsi->bsi_flt_where, "c", /* ( */ ')' );
 
        return 1;
 }
@@ -210,12 +219,22 @@ backsql_process_sub_filter( backsql_srch_info *bsi, Filter *f )
 {
        int                     i;
        backsql_at_map_rec      *at;
+       backsql_info            *bi = (backsql_info *)bsi->bsi_op->o_bd->be_private;
+       int                     casefold = 0;
 
        if ( !f ) {
                return 0;
        }
 
-       at = backsql_ad2at( bsi->oc, f->f_sub_desc );
+#if 0 /* always uppercase strings by now */
+       if ( SLAP_MR_ASSOCIATED( f->f_sub_desc->ad_type->sat_substr,
+                       bi->bi_caseIgnoreMatch ) )
+#endif
+       {
+               casefold = 1;
+       }
+
+       at = backsql_ad2at( bsi->bsi_oc, f->f_sub_desc );
 
        assert( at );
 
@@ -225,49 +244,49 @@ backsql_process_sub_filter( backsql_srch_info *bsi, Filter *f )
         * SQL filters are more liberal.
         */
 
-       backsql_strfcat( &bsi->flt_where, &bsi->fwhere_len, "c", '(' /* ) */  );
+       backsql_strfcat( &bsi->bsi_flt_where, "c", '(' /* ) */  );
 
        /* TimesTen */
-       Debug( LDAP_DEBUG_TRACE, "expr: '%s' '%s'\n", at->sel_expr.bv_val,
-               at->sel_expr_u.bv_val ? at->sel_expr_u.bv_val : "<NULL>", 0 );
-       if ( bsi->bi->upper_func.bv_val ) {
+       Debug( LDAP_DEBUG_TRACE, "expr: '%s' '%s'\n", at->bam_sel_expr.bv_val,
+               at->bam_sel_expr_u.bv_val ? at->bam_sel_expr_u.bv_val : "<NULL>", 0 );
+       if ( casefold && bi->upper_func.bv_val ) {
                /*
                 * If a pre-upper-cased version of the column exists, use it
                 */
-               if ( at->sel_expr_u.bv_val ) {
-                       backsql_strfcat( &bsi->flt_where, &bsi->fwhere_len
+               if ( at->bam_sel_expr_u.bv_val ) {
+                       backsql_strfcat( &bsi->bsi_flt_where
                                        "bl",
-                                       &at->sel_expr_u,
+                                       &at->bam_sel_expr_u,
                                        (ber_len_t)sizeof( " LIKE '" ) - 1,
                                                " LIKE '" );
                } else {
-                       backsql_strfcat( &bsi->flt_where, &bsi->fwhere_len,
+                       backsql_strfcat( &bsi->bsi_flt_where, 
                                        "bcbcl",
-                                       &bsi->bi->upper_func,
+                                       &bi->upper_func,
                                        '(',
-                                       &at->sel_expr,
+                                       &at->bam_sel_expr,
                                        ')', 
                                        (ber_len_t)sizeof( " LIKE '" ) - 1,
                                                " LIKE '" );
                }
        } else {
-               backsql_strfcat( &bsi->flt_where, &bsi->fwhere_len, "bl",
-                               &at->sel_expr,
+               backsql_strfcat( &bsi->bsi_flt_where, "bl",
+                               &at->bam_sel_expr,
                                (ber_len_t)sizeof( " LIKE '" ) - 1, " LIKE '" );
        }
  
        if ( f->f_sub_initial.bv_val != NULL ) {
                size_t  start;
 
-               start = bsi->flt_where.bv_len;
-               backsql_strfcat( &bsi->flt_where, &bsi->fwhere_len, "b",
+               start = bsi->bsi_flt_where.bb_val.bv_len;
+               backsql_strfcat( &bsi->bsi_flt_where, "b",
                                &f->f_sub_initial );
-               if ( bsi->bi->upper_func.bv_val ) {
-                       ldap_pvt_str2upper( &bsi->flt_where.bv_val[ start ] );
+               if ( casefold && bi->upper_func.bv_val ) {
+                       ldap_pvt_str2upper( &bsi->bsi_flt_where.bb_val.bv_val[ start ] );
                }
        }
 
-       backsql_strfcat( &bsi->flt_where, &bsi->fwhere_len, "c", '%' );
+       backsql_strfcat( &bsi->bsi_flt_where, "c", '%' );
 
        if ( f->f_sub_any != NULL ) {
                for ( i = 0; f->f_sub_any[ i ].bv_val != NULL; i++ ) {
@@ -280,32 +299,32 @@ backsql_process_sub_filter( backsql_srch_info *bsi, Filter *f )
                                0, 0 );
 #endif /* BACKSQL_TRACE */
 
-                       start = bsi->flt_where.bv_len;
-                       backsql_strfcat( &bsi->flt_where, &bsi->fwhere_len,
+                       start = bsi->bsi_flt_where.bb_val.bv_len;
+                       backsql_strfcat( &bsi->bsi_flt_where,
                                        "bc",
                                        &f->f_sub_any[ i ],
                                        '%' );
-                       if ( bsi->bi->upper_func.bv_val ) {
+                       if ( casefold && bi->upper_func.bv_val ) {
                                /*
                                 * Note: toupper('%') = '%'
                                 */
-                               ldap_pvt_str2upper( &bsi->flt_where.bv_val[ start ] );
+                               ldap_pvt_str2upper( &bsi->bsi_flt_where.bb_val.bv_val[ start ] );
                        }
                }
 
                if ( f->f_sub_final.bv_val != NULL ) {
                        size_t  start;
 
-                       start = bsi->flt_where.bv_len;
-                       backsql_strfcat( &bsi->flt_where, &bsi->fwhere_len, "b",
+                       start = bsi->bsi_flt_where.bb_val.bv_len;
+                       backsql_strfcat( &bsi->bsi_flt_where, "b",
                                        &f->f_sub_final );
-                       if ( bsi->bi->upper_func.bv_val ) {
-                               ldap_pvt_str2upper( &bsi->flt_where.bv_val[ start ] );
+                       if ( casefold && bi->upper_func.bv_val ) {
+                               ldap_pvt_str2upper( &bsi->bsi_flt_where.bb_val.bv_val[ start ] );
                        }
                }
        }
 
-       backsql_strfcat( &bsi->flt_where, &bsi->fwhere_len, "l", 
+       backsql_strfcat( &bsi->bsi_flt_where, "l", 
                        (ber_len_t)sizeof( /* (' */ "')" ) - 1, /* ( */ "')" );
  
        return 1;
@@ -315,19 +334,15 @@ static int
 backsql_process_filter( backsql_srch_info *bsi, Filter *f )
 {
        backsql_at_map_rec      *at;
-       backsql_at_map_rec      oc_attr = {
-               slap_schema.si_ad_objectClass, BER_BVC(""), BER_BVC(""), 
-               BER_BVNULL, NULL, NULL, NULL };
        AttributeDescription    *ad = NULL;
        int                     done = 0;
-       ber_len_t               len = 0;
-       /* TimesTen */
        int                     rc = 0;
-       struct berval           *filter_value = NULL;
 
        Debug( LDAP_DEBUG_TRACE, "==>backsql_process_filter()\n", 0, 0, 0 );
-       if ( f == NULL || f->f_choice == SLAPD_FILTER_COMPUTED ) {
-               return 0;
+       if ( f->f_choice == SLAPD_FILTER_COMPUTED ) {
+               Debug( LDAP_DEBUG_TRACE, "backsql_process_filter(): "
+                       "invalid filter\n", 0, 0, 0 );
+               goto impossible;
        }
 
        switch( f->f_choice ) {
@@ -344,12 +359,11 @@ backsql_process_filter( backsql_srch_info *bsi, Filter *f )
                break;
 
        case LDAP_FILTER_NOT:
-               backsql_strfcat( &bsi->flt_where, &bsi->fwhere_len, "l",
+               backsql_strfcat( &bsi->bsi_flt_where, "l",
                                (ber_len_t)sizeof( "NOT (" /* ) */ ) - 1,
                                        "NOT (" /* ) */ );
                rc = backsql_process_filter( bsi, f->f_not );
-               backsql_strfcat( &bsi->flt_where, &bsi->fwhere_len, "c",
-                               /* ( */ ')' );
+               backsql_strfcat( &bsi->bsi_flt_where, "c", /* ( */ ')' );
                done = 1;
                break;
 
@@ -367,7 +381,6 @@ backsql_process_filter( backsql_srch_info *bsi, Filter *f )
        }
 
        if ( rc == -1 ) {
-               /* TimesTen : Don't run the query */
                goto impossible;
        }
  
@@ -380,11 +393,54 @@ backsql_process_filter( backsql_srch_info *bsi, Filter *f )
         */
        if ( ad == slap_schema.si_ad_objectClass 
                        || ad == slap_schema.si_ad_structuralObjectClass ) {
-               at = &oc_attr;
-               backsql_strfcat( &at->sel_expr, &len, "cbc",
-                               '\'', 
-                               &bsi->oc->oc->soc_cname, 
-                               '\'' );
+               /*
+                * If the filter is LDAP_FILTER_PRESENT, then it's done;
+                * otherwise, let's see if we are lucky: filtering
+                * for "structural" objectclass or ancestor...
+                */
+               switch ( f->f_choice ) {
+               case LDAP_FILTER_EQUALITY:
+               {
+                       ObjectClass     *oc = oc_bvfind( &f->f_av_value );
+
+                       if ( oc == NULL ) {
+                               Debug( LDAP_DEBUG_TRACE,
+                                               "backsql_process_filter(): "
+                                               "unknown objectClass \"%s\" "
+                                               "in filter\n",
+                                               f->f_av_value.bv_val, 0, 0 );
+                               bsi->bsi_status = LDAP_OTHER;
+                               goto impossible;
+                       }
+
+                       /*
+                        * objectClass inheritance:
+                        * - a search for "person" will also return "inetOrgPerson"
+                        * - a search for "top" will return everything
+                        */
+                       if ( is_object_subclass( oc, bsi->bsi_oc->bom_oc ) ) {
+                               goto filter_oc_success;
+                       }
+
+                       break;
+               }
+
+               case LDAP_FILTER_PRESENT:
+filter_oc_success:;
+                       backsql_strfcat( &bsi->bsi_flt_where, "l",
+                                       (ber_len_t)sizeof( "1=1" ) - 1, "1=1" );
+                       bsi->bsi_status = LDAP_SUCCESS;
+                       goto done;
+                       
+               default:
+                       Debug( LDAP_DEBUG_TRACE,
+                                       "backsql_process_filter(): "
+                                       "illegal/unhandled filter "
+                                       "on objectClass attribute",
+                                       0, 0, 0 );
+                       bsi->bsi_status = LDAP_OTHER;
+                       goto impossible;
+               }
 
        } else if ( ad == slap_schema.si_ad_hasSubordinates || ad == NULL ) {
                /*
@@ -395,15 +451,19 @@ backsql_process_filter( backsql_srch_info *bsi, Filter *f )
                 * Note however that hasSubordinates is boolean, 
                 * so a more appropriate filter would be 
                 * '(hasSubordinates=FALSE)'
+                *
+                * A more robust search for hasSubordinates
+                * would * require joining the ldap_entries table
+                * selecting if there are descendants of the
+                * candidate.
                 */
-               backsql_strfcat( &bsi->flt_where, &bsi->fwhere_len, "l",
+               backsql_strfcat( &bsi->bsi_flt_where, "l",
                                (ber_len_t)sizeof( "1=1" ) - 1, "1=1" );
                if ( ad == slap_schema.si_ad_hasSubordinates ) {
                        /*
-                        * We use this flag since we need to parse
-                        * the filter anyway; we should have used
-                        * the frontend API function
-                        * filter_has_subordinates()
+                        * instruct candidate selection algorithm
+                        * and attribute list to try to detect
+                        * if an entry has subordinates
                         */
                        bsi->bsi_flags |= BSQL_SF_FILTER_HASSUBORDINATE;
 
@@ -415,102 +475,148 @@ backsql_process_filter( backsql_srch_info *bsi, Filter *f )
                        backsql_attrlist_add( bsi, NULL );
                }
                goto done;
-               
-       } else {
-               at = backsql_ad2at( bsi->oc, ad );
        }
 
+       /* look for attribute (also if objectClass but not structural one) */
+       at = backsql_ad2at( bsi->bsi_oc, ad );
+
        if ( at == NULL ) {
                Debug( LDAP_DEBUG_TRACE, "backsql_process_filter(): "
                        "attribute '%s' is not defined for objectclass '%s'\n",
-                       ad->ad_cname.bv_val, BACKSQL_OC_NAME( bsi->oc ), 0 );
-               backsql_strfcat( &bsi->flt_where, &bsi->fwhere_len, "l",
+                       ad->ad_cname.bv_val, BACKSQL_OC_NAME( bsi->bsi_oc ), 0 );
+
+#if 0
+               backsql_strfcat( &bsi->bsi_flt_where, "l",
                                (ber_len_t)sizeof( "1=0" ) - 1, "1=0" );
+               bsi->bsi_status = LDAP_UNDEFINED_TYPE;
                goto impossible;
+#else
+               /* search anyway; other parts of the filter may succeeed */
+               backsql_strfcat( &bsi->bsi_flt_where, "l",
+                               (ber_len_t)sizeof( "1=1" ) - 1, "1=1" );
+               bsi->bsi_status = LDAP_SUCCESS;
+               goto done;
+#endif
+       }
+
+       /* apply extra level of parens only if required */
+       done = 0;
+       if ( at->bam_next ) {
+               backsql_strfcat( &bsi->bsi_flt_where, "c", '(' );
+               done = 1;
+       }
+next:;
+       if ( backsql_process_filter_attr( bsi, f, at ) == -1 ) {
+               return -1;
+       }
+
+       if ( at->bam_next ) {
+               backsql_strfcat( &bsi->bsi_flt_where, "l",
+                               sizeof( " OR " ) - 1, " OR " );
+               at = at->bam_next;
+               goto next;
+       }
+       if ( done ) {
+               backsql_strfcat( &bsi->bsi_flt_where, "c", ')' );
        }
 
-       backsql_merge_from_clause( &bsi->from, &bsi->from_len, 
-                       &at->from_tbls );
+done:;
+       Debug( LDAP_DEBUG_TRACE, "<==backsql_process_filter()\n", 0, 0, 0 );
+       return 1;
+
+impossible:;
+       Debug( LDAP_DEBUG_TRACE, "<==backsql_process_filter() returns -1\n",
+                       0, 0, 0 );
+       return -1;
+}
+
+static int
+backsql_process_filter_attr( backsql_srch_info *bsi, Filter *f, backsql_at_map_rec *at )
+{
+       backsql_info            *bi = (backsql_info *)bsi->bsi_op->o_bd->be_private;
+       int                     casefold = 0;
+       struct berval           *filter_value = NULL;
+       MatchingRule            *matching_rule = NULL;
+       struct berval           ordering = BER_BVC("<=");
+
+       Debug( LDAP_DEBUG_TRACE, "==>backsql_process_filter_attr(%s)\n",
+               at->bam_ad->ad_cname.bv_val, 0, 0 );
+
+       backsql_merge_from_clause( &bsi->bsi_from, &at->bam_from_tbls );
+
        /*
         * need to add this attribute to list of attrs to load,
-        * so that we could do test_filter() later
+        * so that we can do test_filter() later
         */
-       backsql_attrlist_add( bsi, ad );
+       backsql_attrlist_add( bsi, at->bam_ad );
 
-       if ( at->join_where.bv_val != NULL 
-                       && strstr( bsi->join_where.bv_val, at->join_where.bv_val ) == NULL ) {
-               backsql_strfcat( &bsi->join_where, &bsi->jwhere_len, "lb",
+       if ( at->bam_join_where.bv_val != NULL 
+                       && strstr( bsi->bsi_join_where.bb_val.bv_val, at->bam_join_where.bv_val ) == NULL ) {
+               backsql_strfcat( &bsi->bsi_join_where, "lb",
                                (ber_len_t)sizeof( " AND " ) - 1, " AND ",
-                               &at->join_where );
+                               &at->bam_join_where );
        }
 
-#if 0
-       /*
-        * FIXME: this is not required any more; however, note that
-        * attribute name syntax might collide with SQL legal aliases
-        */
-       if ( at != &oc_attr ) {
-               backsql_strfcat( &bsi->sel, &bsi->sel_len, "cblb",
-                               ',',
-                               &at->sel_expr,
-                               (ber_len_t)sizeof( " AS " ) - 1, " AS ", 
-                               &at->name );
-       }
-#endif
-
        switch ( f->f_choice ) {
        case LDAP_FILTER_EQUALITY:
                filter_value = &f->f_av_value;
+               matching_rule = at->bam_ad->ad_type->sat_equality;
+
                goto equality_match;
 
-               /* fail over next case */
+               /* fail over into next case */
                
        case LDAP_FILTER_EXT:
                filter_value = &f->f_mra->ma_value;
+               matching_rule = f->f_mr_rule;
 
 equality_match:;
+#if 0 /* always uppercase strings by now */
+               if ( SLAP_MR_ASSOCIATED( matching_rule,
+                                       bi->bi_caseIgnoreMatch ) )
+#endif
+               {
+                       casefold = 1;
+               }
+
                /*
                 * maybe we should check type of at->sel_expr here somehow,
                 * to know whether upper_func is applicable, but for now
                 * upper_func stuff is made for Oracle, where UPPER is
                 * safely applicable to NUMBER etc.
                 */
-               if ( bsi->bi->upper_func.bv_val ) {
+               if ( casefold && bi->upper_func.bv_val ) {
                        size_t  start;
 
-                       if ( at->sel_expr_u.bv_val ) {
-                               backsql_strfcat( &bsi->flt_where,
-                                               &bsi->fwhere_len, "cbl",
-                                               '(',
-                                               &at->sel_expr_u, 
+                       if ( at->bam_sel_expr_u.bv_val ) {
+                               backsql_strfcat( &bsi->bsi_flt_where, "cbl",
+                                               '(', /* ) */
+                                               &at->bam_sel_expr_u, 
                                                (ber_len_t)sizeof( "='" ) - 1,
                                                        "='" );
                        } else {
-                               backsql_strfcat( &bsi->flt_where,
-                                               &bsi->fwhere_len, "cbcbl",
+                               backsql_strfcat( &bsi->bsi_flt_where, "cbcbl",
                                                '(' /* ) */ ,
-                                               &bsi->bi->upper_func,
+                                               &bi->upper_func,
                                                '(' /* ) */ ,
-                                               &at->sel_expr,
+                                               &at->bam_sel_expr,
                                                (ber_len_t)sizeof( /* ( */ ")='" ) - 1,
                                                        /* ( */ ")='" );
                        }
 
-                       start = bsi->flt_where.bv_len;
+                       start = bsi->bsi_flt_where.bb_val.bv_len;
 
-                       backsql_strfcat( &bsi->flt_where, &bsi->fwhere_len,
-                                       "bl",
+                       backsql_strfcat( &bsi->bsi_flt_where, "bl",
                                        filter_value, 
                                        (ber_len_t)sizeof( /* (' */ "')" ) - 1,
                                                /* (' */ "')" );
 
-                       ldap_pvt_str2upper( &bsi->flt_where.bv_val[ start ] );
+                       ldap_pvt_str2upper( &bsi->bsi_flt_where.bb_val.bv_val[ start ] );
 
                } else {
-                       backsql_strfcat( &bsi->flt_where, &bsi->fwhere_len,
-                                       "cblbl",
+                       backsql_strfcat( &bsi->bsi_flt_where, "cblbl",
                                        '(',
-                                       &at->sel_expr,
+                                       &at->bam_sel_expr,
                                        (ber_len_t)sizeof( "='" ) - 1, "='",
                                        filter_value,
                                        (ber_len_t)sizeof( /* (' */ "')" ) - 1,
@@ -519,34 +625,70 @@ equality_match:;
                break;
 
        case LDAP_FILTER_GE:
-               /*
-                * FIXME: should we uppercase the operands?
-                */
-               backsql_strfcat( &bsi->flt_where, &bsi->fwhere_len, "cblbc",
-                               '(' /* ) */ ,
-                               &at->sel_expr,
-                               (ber_len_t)sizeof( ">=" ) - 1, ">=", 
-                               &f->f_av_value,
-                               /* ( */ ')' );
-               break;
+               ordering.bv_val = ">=";
+
+               /* fall thru to next case */
                
        case LDAP_FILTER_LE:
+#if 0 /* always uppercase strings by now */
+               if ( SLAP_MR_ASSOCIATED( at->bam_ad->ad_type->sat_ordering,
+                               bi->bi_caseIgnoreMatch ) )
+#endif
+               {
+                       casefold = 1;
+               }
+
                /*
                 * FIXME: should we uppercase the operands?
                 */
-               backsql_strfcat( &bsi->flt_where, &bsi->fwhere_len, "cblbc",
-                               '(' /* ) */ ,
-                               &at->sel_expr,
-                               (ber_len_t)sizeof( "<=" ) - 1, "<=", 
-                               &f->f_av_value,
-                               /* ( */ ')' );
+               if ( casefold && bi->upper_func.bv_val ) {
+                       size_t  start;
+
+                       if ( at->bam_sel_expr_u.bv_val ) {
+                               backsql_strfcat( &bsi->bsi_flt_where, "cbbc",
+                                               '(',
+                                               &at->bam_sel_expr_u, 
+                                               &ordering,
+                                               '\'' );
+                       } else {
+                               backsql_strfcat( &bsi->bsi_flt_where, "cbcbcbc",
+                                               '(' /* ) */ ,
+                                               &bi->upper_func,
+                                               '(' /* ) */ ,
+                                               &at->bam_sel_expr,
+                                               /* ( */ ')',
+                                               &ordering,
+                                               '\'' );
+                       }
+
+                       start = bsi->bsi_flt_where.bb_val.bv_len;
+
+                       backsql_strfcat( &bsi->bsi_flt_where, "bl",
+                                       filter_value, 
+                                       (ber_len_t)sizeof( /* (' */ "')" ) - 1,
+                                               /* (' */ "')" );
+
+                       ldap_pvt_str2upper( &bsi->bsi_flt_where.bb_val.bv_val[ start ] );
+               
+               } else {
+                       backsql_strfcat( &bsi->bsi_flt_where, "cbbcbl",
+                                       '(' /* ) */ ,
+                                       &at->bam_sel_expr,
+                                       &ordering,
+                                       '\'',
+                                       &f->f_av_value,
+                                       (ber_len_t)sizeof( /* (' */ "')" ) - 1,
+                                               /* ( */ "')" );
+               }
                break;
 
        case LDAP_FILTER_PRESENT:
-               backsql_strfcat( &bsi->flt_where, &bsi->fwhere_len, "lbl",
-                               (ber_len_t)sizeof( "NOT (" ) - 1, "NOT (", 
-                               &at->sel_expr, 
-                               (ber_len_t)sizeof( " IS NULL)" ) - 1, " IS NULL)" );
+               backsql_strfcat( &bsi->bsi_flt_where, "lbl",
+                               (ber_len_t)sizeof( "NOT (" /* ) */) - 1,
+                                       "NOT (", /* ) */
+                               &at->bam_sel_expr, 
+                               (ber_len_t)sizeof( /* ( */ " IS NULL)" ) - 1,
+                                       /* ( */ " IS NULL)" );
                break;
 
        case LDAP_FILTER_SUBSTRINGS:
@@ -562,42 +704,38 @@ equality_match:;
                 * upper_func stuff is made for Oracle, where UPPER is
                 * safely applicable to NUMBER etc.
                 */
-               if ( bsi->bi->upper_func.bv_val ) {
+               if ( bi->upper_func.bv_val ) {
                        size_t  start;
 
-                       if ( at->sel_expr_u.bv_val ) {
-                               backsql_strfcat( &bsi->flt_where,
-                                               &bsi->fwhere_len, "cbl",
-                                               '(',
-                                               &at->sel_expr_u, 
+                       if ( at->bam_sel_expr_u.bv_val ) {
+                               backsql_strfcat( &bsi->bsi_flt_where, "cbl",
+                                               '(', /* ) */
+                                               &at->bam_sel_expr_u, 
                                                (ber_len_t)sizeof( " LIKE '%" ) - 1,
                                                        " LIKE '%" );
                        } else {
-                               backsql_strfcat( &bsi->flt_where,
-                                               &bsi->fwhere_len, "cbcbl",
+                               backsql_strfcat( &bsi->bsi_flt_where, "cbcbl",
                                                '(' /* ) */ ,
-                                               &bsi->bi->upper_func,
+                                               &bi->upper_func,
                                                '(' /* ) */ ,
-                                               &at->sel_expr,
+                                               &at->bam_sel_expr,
                                                (ber_len_t)sizeof( /* ( */ ") LIKE '%" ) - 1,
                                                        /* ( */ ") LIKE '%" );
                        }
 
-                       start = bsi->flt_where.bv_len;
+                       start = bsi->bsi_flt_where.bb_val.bv_len;
 
-                       backsql_strfcat( &bsi->flt_where, &bsi->fwhere_len,
-                                       "bl",
+                       backsql_strfcat( &bsi->bsi_flt_where, "bl",
                                        &f->f_av_value, 
                                        (ber_len_t)sizeof( /* (' */ "%')" ) - 1,
                                                /* (' */ "%')" );
 
-                       ldap_pvt_str2upper( &bsi->flt_where.bv_val[ start ] );
+                       ldap_pvt_str2upper( &bsi->bsi_flt_where.bb_val.bv_val[ start ] );
 
                } else {
-                       backsql_strfcat( &bsi->flt_where, &bsi->fwhere_len,
-                                       "cblbl",
-                                       '(',
-                                       &at->sel_expr,
+                       backsql_strfcat( &bsi->bsi_flt_where, "cblbl",
+                                       '(', /* ) */
+                                       &at->bam_sel_expr,
                                        (ber_len_t)sizeof( " LIKE '%" ) - 1,
                                                " LIKE '%",
                                        &f->f_av_value,
@@ -609,34 +747,22 @@ equality_match:;
        default:
                /* unhandled filter type; should not happen */
                assert( 0 );
-               backsql_strfcat( &bsi->flt_where, &bsi->fwhere_len, "l",
+               backsql_strfcat( &bsi->bsi_flt_where, "l",
                                (ber_len_t)sizeof( "1=1" ) - 1, "1=1" );
                break;
 
        }
 
-done:
-       if ( oc_attr.sel_expr.bv_val != NULL ) {
-               free( oc_attr.sel_expr.bv_val );
-       }
-       
-       Debug( LDAP_DEBUG_TRACE, "<==backsql_process_filter()\n", 0, 0, 0 );
-       return 1;
+       Debug( LDAP_DEBUG_TRACE, "<==backsql_process_filter_attr(%s)\n",
+               at->bam_ad->ad_cname.bv_val, 0, 0 );
 
-impossible:
-       if ( oc_attr.sel_expr.bv_val != NULL ) {
-               free( oc_attr.sel_expr.bv_val );
-       }
-       Debug( LDAP_DEBUG_TRACE, "<==backsql_process_filter() returns -1\n",
-                       0, 0, 0 );
-       return -1;
+       return 1;
 }
 
 static int
 backsql_srch_query( backsql_srch_info *bsi, struct berval *query )
 {
-       backsql_info    *bi = (backsql_info *)bsi->be->be_private;
-       ber_len_t       q_len = 0;
+       backsql_info    *bi = (backsql_info *)bsi->bsi_op->o_bd->be_private;
        int             rc;
 
        assert( query );
@@ -644,164 +770,149 @@ backsql_srch_query( backsql_srch_info *bsi, struct berval *query )
        query->bv_len = 0;
 
        Debug( LDAP_DEBUG_TRACE, "==>backsql_srch_query()\n", 0, 0, 0 );
-       bsi->sel.bv_val = NULL;
-       bsi->sel.bv_len = 0;
-       bsi->sel_len = 0;
-       bsi->from.bv_val = NULL;
-       bsi->from.bv_len = 0;
-       bsi->from_len = 0;
-       bsi->join_where.bv_val = NULL;
-       bsi->join_where.bv_len = 0;
-       bsi->jwhere_len = 0;
-       bsi->flt_where.bv_val = NULL;
-       bsi->flt_where.bv_len = 0;
-       bsi->fwhere_len = 0;
-
-#if 0
-       /*
-        * FIXME: this query has been split in case a string cast function
-        * is defined; more sophisticated (pattern based) function should
-        * be used
-        */
-       backsql_strcat( &bsi->sel, &bsi->sel_len,
-                       "SELECT DISTINCT ldap_entries.id,", 
-                       bsi->oc->keytbl.bv_val, ".", bsi->oc->keycol.bv_val,
-                       ",'", bsi->oc->name.bv_val, "' AS objectClass",
-                       ",ldap_entries.dn AS dn", NULL );
-#endif
-
-       backsql_strfcat( &bsi->sel, &bsi->sel_len, "lbcbc",
+       bsi->bsi_sel.bb_val.bv_val = NULL;
+       bsi->bsi_sel.bb_val.bv_len = 0;
+       bsi->bsi_sel.bb_len = 0;
+       bsi->bsi_from.bb_val.bv_val = NULL;
+       bsi->bsi_from.bb_val.bv_len = 0;
+       bsi->bsi_from.bb_len = 0;
+       bsi->bsi_join_where.bb_val.bv_val = NULL;
+       bsi->bsi_join_where.bb_val.bv_len = 0;
+       bsi->bsi_join_where.bb_len = 0;
+       bsi->bsi_flt_where.bb_val.bv_val = NULL;
+       bsi->bsi_flt_where.bb_val.bv_len = 0;
+       bsi->bsi_flt_where.bb_len = 0;
+
+       backsql_strfcat( &bsi->bsi_sel, "lbcbc",
                        (ber_len_t)sizeof( "SELECT DISTINCT ldap_entries.id," ) - 1,
                                "SELECT DISTINCT ldap_entries.id,", 
-                       &bsi->oc->keytbl, 
+                       &bsi->bsi_oc->bom_keytbl, 
                        '.', 
-                       &bsi->oc->keycol, 
+                       &bsi->bsi_oc->bom_keycol, 
                        ',' );
 
        if ( bi->strcast_func.bv_val ) {
-               backsql_strfcat( &bsi->sel, &bsi->sel_len, "blbl",
+               backsql_strfcat( &bsi->bsi_sel, "blbl",
                                &bi->strcast_func, 
                                (ber_len_t)sizeof( "('" /* ') */ ) - 1,
                                        "('" /* ') */ ,
-                               &bsi->oc->oc->soc_cname,
+                               &bsi->bsi_oc->bom_oc->soc_cname,
                                (ber_len_t)sizeof( /* (' */ "')" ) - 1,
                                        /* (' */ "')" );
        } else {
-               backsql_strfcat( &bsi->sel, &bsi->sel_len, "cbc",
+               backsql_strfcat( &bsi->bsi_sel, "cbc",
                                '\'',
-                               &bsi->oc->oc->soc_cname,
+                               &bsi->bsi_oc->bom_oc->soc_cname,
                                '\'' );
        }
-       backsql_strfcat( &bsi->sel, &bsi->sel_len, "l",
+       backsql_strfcat( &bsi->bsi_sel, "l",
                        (ber_len_t)sizeof( " AS objectClass,ldap_entries.dn AS dn" ) - 1,
                        " AS objectClass,ldap_entries.dn AS dn" );
 
-       backsql_strfcat( &bsi->from, &bsi->from_len, "lb",
+       backsql_strfcat( &bsi->bsi_from, "lb",
                        (ber_len_t)sizeof( " FROM ldap_entries," ) - 1,
                                " FROM ldap_entries,",
-                       &bsi->oc->keytbl );
+                       &bsi->bsi_oc->bom_keytbl );
 
-       backsql_strfcat( &bsi->join_where, &bsi->jwhere_len, "lbcbl",
+       backsql_strfcat( &bsi->bsi_join_where, "lbcbl",
                        (ber_len_t)sizeof( " WHERE " ) - 1, " WHERE ",
-                       &bsi->oc->keytbl,
+                       &bsi->bsi_oc->bom_keytbl,
                        '.',
-                       &bsi->oc->keycol,
+                       &bsi->bsi_oc->bom_keycol,
                        (ber_len_t)sizeof( "=ldap_entries.keyval AND ldap_entries.oc_map_id=? AND " ) - 1,
                                "=ldap_entries.keyval AND ldap_entries.oc_map_id=? AND " );
 
-       switch ( bsi->scope ) {
+       switch ( bsi->bsi_scope ) {
        case LDAP_SCOPE_BASE:
-               if ( bsi->bi->upper_func.bv_val ) {
-                       backsql_strfcat( &bsi->join_where, &bsi->jwhere_len, 
-                                       "blbcb",
-                                       &bsi->bi->upper_func,
+               if ( bi->upper_func.bv_val ) {
+                       backsql_strfcat( &bsi->bsi_join_where, "blbcb",
+                                       &bi->upper_func,
                                        (ber_len_t)sizeof( "(ldap_entries.dn)=" ) - 1,
                                                "(ldap_entries.dn)=",
-                                       &bsi->bi->upper_func_open,
+                                       &bi->upper_func_open,
                                        '?', 
-                                       &bsi->bi->upper_func_close );
+                                       &bi->upper_func_close );
                } else {
-                       backsql_strfcat( &bsi->join_where, &bsi->jwhere_len,
-                                       "l",
+                       backsql_strfcat( &bsi->bsi_join_where, "l",
                                        (ber_len_t)sizeof( "ldap_entries.dn=?" ) - 1,
                                                "ldap_entries.dn=?" );
                }
                break;
                
        case LDAP_SCOPE_ONELEVEL:
-               backsql_strfcat( &bsi->join_where, &bsi->jwhere_len, "l",
+               backsql_strfcat( &bsi->bsi_join_where, "l",
                                (ber_len_t)sizeof( "ldap_entries.parent=?" ) - 1,
                                        "ldap_entries.parent=?" );
                break;
 
        case LDAP_SCOPE_SUBTREE:
-               if ( bsi->bi->upper_func.bv_val ) {
-                       backsql_strfcat( &bsi->join_where, &bsi->jwhere_len, 
-                                       "blbcb",
-                                       &bsi->bi->upper_func,
+               if ( bi->upper_func.bv_val ) {
+                       backsql_strfcat( &bsi->bsi_join_where, "blbcb",
+                                       &bi->upper_func,
                                        (ber_len_t)sizeof( "(ldap_entries.dn) LIKE " ) - 1,
                                                "(ldap_entries.dn) LIKE ",
-                                       &bsi->bi->upper_func_open,
+                                       &bi->upper_func_open,
                                        '?', 
-                                       &bsi->bi->upper_func_close );
+                                       &bi->upper_func_close );
                } else {
-                       backsql_strfcat( &bsi->join_where, &bsi->jwhere_len,
-                                       "l",
+                       backsql_strfcat( &bsi->bsi_join_where, "l",
                                        (ber_len_t)sizeof( "ldap_entries.dn LIKE ?" ) - 1,
                                                "ldap_entries.dn LIKE ?" );
                }
 
-#if 0
-               backsql_strfcat( &bsi->join_where, &bsi->jwhere_len, "b",
-                               &bsi->bi->subtree_cond );
-#endif
                break;
 
        default:
                assert( 0 );
        }
 
-       rc = backsql_process_filter( bsi, bsi->filter );
+       rc = backsql_process_filter( bsi, bsi->bsi_filter );
        if ( rc > 0 ) {
-               backsql_strfcat( query, &q_len, "bbblb",
-                               &bsi->sel,
-                               &bsi->from, 
-                               &bsi->join_where,
+               struct berbuf   bb = BB_NULL;
+
+               backsql_strfcat( &bb, "bbblb",
+                               &bsi->bsi_sel.bb_val,
+                               &bsi->bsi_from.bb_val, 
+                               &bsi->bsi_join_where.bb_val,
                                (ber_len_t)sizeof( " AND " ) - 1, " AND ",
-                               &bsi->flt_where );
+                               &bsi->bsi_flt_where.bb_val );
+
+               *query = bb.bb_val;
 
        } else if ( rc < 0 ) {
                /* 
                 * Indicates that there's no possible way the filter matches
                 * anything.  No need to issue the query
                 */
-               Debug( LDAP_DEBUG_TRACE,
-                       "<==backsql_srch_query() returns NULL\n", 0, 0, 0 );
                free( query->bv_val );
                query->bv_val = NULL;
        }
  
-       free( bsi->sel.bv_val );
-       bsi->sel.bv_len = 0;
-       bsi->sel_len = 0;
-       free( bsi->from.bv_val );
-       bsi->from.bv_len = 0;
-       bsi->from_len = 0;
-       free( bsi->join_where.bv_val );
-       bsi->join_where.bv_len = 0;
-       bsi->jwhere_len = 0;
-       free( bsi->flt_where.bv_val );
-       bsi->flt_where.bv_len = 0;
-       bsi->fwhere_len = 0;
+       free( bsi->bsi_sel.bb_val.bv_val );
+       bsi->bsi_sel.bb_val.bv_len = 0;
+       bsi->bsi_sel.bb_len = 0;
+       free( bsi->bsi_from.bb_val.bv_val );
+       bsi->bsi_from.bb_val.bv_len = 0;
+       bsi->bsi_from.bb_len = 0;
+       free( bsi->bsi_join_where.bb_val.bv_val );
+       bsi->bsi_join_where.bb_val.bv_len = 0;
+       bsi->bsi_join_where.bb_len = 0;
+       free( bsi->bsi_flt_where.bb_val.bv_val );
+       bsi->bsi_flt_where.bb_val.bv_len = 0;
+       bsi->bsi_flt_where.bb_len = 0;
        
-       Debug( LDAP_DEBUG_TRACE, "<==backsql_srch_query()\n", 0, 0, 0 );
+       Debug( LDAP_DEBUG_TRACE, "<==backsql_srch_query() returns %s\n",
+               query->bv_val ? query->bv_val : "NULL", 0, 0 );
        
-       return ( query->bv_val == NULL ? 1 : 0 );
+       return ( rc <= 0 ? 1 : 0 );
 }
 
-int
-backsql_oc_get_candidates( backsql_oc_map_rec *oc, backsql_srch_info *bsi )
+static int
+backsql_oc_get_candidates( void *v_oc, void *v_bsi )
 {
+       backsql_oc_map_rec      *oc = v_oc;
+       backsql_srch_info       *bsi = v_bsi;
+       backsql_info            *bi = (backsql_info *)bsi->bsi_op->o_bd->be_private;
        struct berval           query;
        SQLHSTMT                sth;
        RETCODE                 rc;
@@ -810,53 +921,93 @@ backsql_oc_get_candidates( backsql_oc_map_rec *oc, backsql_srch_info *bsi )
        BACKSQL_ROW_NTS         row;
        int                     i;
        int                     j;
+
+       int                     n_candidates = bsi->bsi_n_candidates;
+
+       bsi->bsi_status = LDAP_SUCCESS;
  
-       Debug(  LDAP_DEBUG_TRACE, "==>backsql_oc_get_candidates(): oc='%s'\n",
+       Debug( LDAP_DEBUG_TRACE, "==>backsql_oc_get_candidates(): oc='%s'\n",
                        BACKSQL_OC_NAME( oc ), 0, 0 );
 
-       if ( bsi->n_candidates == -1 ) {
+       if ( bsi->bsi_n_candidates == -1 ) {
                Debug( LDAP_DEBUG_TRACE, "backsql_oc_get_candidates(): "
                        "unchecked limit has been overcome\n", 0, 0, 0 );
                /* should never get here */
                assert( 0 );
+               bsi->bsi_status = LDAP_ADMINLIMIT_EXCEEDED;
                return BACKSQL_STOP;
        }
        
-       bsi->oc = oc;
-       if ( backsql_srch_query( bsi, &query ) ) {
+       bsi->bsi_oc = oc;
+       res = backsql_srch_query( bsi, &query );
+       if ( res ) {
                Debug( LDAP_DEBUG_TRACE, "backsql_oc_get_candidates(): "
-                       "could not construct query for objectclass\n",
-                       0, 0, 0 );
+                       "error while constructing query for objectclass '%s'\n",
+                       oc->bom_oc->soc_cname.bv_val, 0, 0 );
+               /*
+                * FIXME: need to separate errors from legally
+                * impossible filters
+                */
+               switch ( bsi->bsi_status ) {
+               case LDAP_SUCCESS:
+               case LDAP_UNDEFINED_TYPE:
+               case LDAP_NO_SUCH_OBJECT:
+                       /* we are conservative... */
+               default:
+                       bsi->bsi_status = LDAP_SUCCESS;
+                       /* try next */
+                       return BACKSQL_CONTINUE;
+
+               case LDAP_ADMINLIMIT_EXCEEDED:
+               case LDAP_OTHER:
+                       /* don't try any more */
+                       return BACKSQL_STOP;
+               }
+       }
+
+       if ( query.bv_val == NULL ) {
+               Debug( LDAP_DEBUG_TRACE, "backsql_oc_get_candidates(): "
+                       "could not construct query for objectclass '%s'\n",
+                       oc->bom_oc->soc_cname.bv_val, 0, 0 );
+               bsi->bsi_status = LDAP_SUCCESS;
                return BACKSQL_CONTINUE;
        }
 
        Debug( LDAP_DEBUG_TRACE, "Constructed query: %s\n", 
                        query.bv_val, 0, 0 );
 
-       rc = backsql_Prepare( bsi->dbh, &sth, query.bv_val, 0 );
+       rc = backsql_Prepare( bsi->bsi_dbh, &sth, query.bv_val, 0 );
        free( query.bv_val );
        if ( rc != SQL_SUCCESS ) {
                Debug( LDAP_DEBUG_TRACE, "backsql_oc_get_candidates(): "
                        "error preparing query\n", 0, 0, 0 );
-               backsql_PrintErrors( bsi->bi->db_env, bsi->dbh, sth, rc );
+               backsql_PrintErrors( bi->db_env, bsi->bsi_dbh, sth, rc );
+               bsi->bsi_status = LDAP_OTHER;
                return BACKSQL_CONTINUE;
        }
+       
+       Debug( LDAP_DEBUG_TRACE, "id: '%ld'\n", bsi->bsi_oc->bom_id, 0, 0 );
 
-       if ( backsql_BindParamID( sth, 1, &bsi->oc->id ) != SQL_SUCCESS ) {
+       if ( backsql_BindParamID( sth, 1, &bsi->bsi_oc->bom_id ) != SQL_SUCCESS ) {
                Debug( LDAP_DEBUG_TRACE, "backsql_oc_get_candidates(): "
                        "error binding objectclass id parameter\n", 0, 0, 0 );
+               bsi->bsi_status = LDAP_OTHER;
                return BACKSQL_CONTINUE;
        }
 
-       switch ( bsi->scope ) {
+       switch ( bsi->bsi_scope ) {
        case LDAP_SCOPE_BASE:
-               rc = backsql_BindParamStr( sth, 2, bsi->base_dn->bv_val,
+               Debug( LDAP_DEBUG_TRACE, "(base)dn: '%s'\n",
+                               bsi->bsi_base_dn->bv_val, 0, 0 );
+
+               rc = backsql_BindParamStr( sth, 2, bsi->bsi_base_dn->bv_val,
                                BACKSQL_MAX_DN_LEN );
                if ( rc != SQL_SUCCESS ) {
                        Debug( LDAP_DEBUG_TRACE, "backsql_oc_get_candidates(): "
                                "error binding base_dn parameter\n", 0, 0, 0 );
-                       backsql_PrintErrors( bsi->bi->db_env, bsi->dbh, 
+                       backsql_PrintErrors( bi->db_env, bsi->bsi_dbh, 
                                        sth, rc );
+                       bsi->bsi_status = LDAP_OTHER;
                        return BACKSQL_CONTINUE;
                }
                break;
@@ -874,7 +1025,7 @@ backsql_oc_get_candidates( backsql_oc_map_rec *oc, backsql_srch_info *bsi )
                 * We do not accept DNs longer than BACKSQL_MAX_DN_LEN;
                 * however this should be handled earlier
                 */
-               assert( bsi->base_dn->bv_len <= BACKSQL_MAX_DN_LEN );
+               assert( bsi->bsi_base_dn->bv_len <= BACKSQL_MAX_DN_LEN );
                        
                /* 
                 * Sets the parameters for the SQL built earlier
@@ -889,24 +1040,24 @@ backsql_oc_get_candidates( backsql_oc_map_rec *oc, backsql_srch_info *bsi )
                 * If "dn" is being used, do a suffix search.
                 * If "dn_ru" is being used, do a prefix search.
                 */
-               if ( BACKSQL_HAS_LDAPINFO_DN_RU( bsi->bi ) ) {
+               if ( BACKSQL_HAS_LDAPINFO_DN_RU( bi ) ) {
                        temp_base_dn[ 0 ] = '\0';
-                       for ( i = 0, j = bsi->base_dn->bv_len - 1;
+                       for ( i = 0, j = bsi->bsi_base_dn->bv_len - 1;
                                        j >= 0; i++, j--) {
-                               temp_base_dn[ i ] = bsi->base_dn->bv_val[ j ];
+                               temp_base_dn[ i ] = bsi->bsi_base_dn->bv_val[ j ];
                        }
                        temp_base_dn[ i ] = '%';
                        temp_base_dn[ i + 1 ] = '\0';
-                       ldap_pvt_str2upper( temp_base_dn );
 
                } else {
                        temp_base_dn[ 0 ] = '%';
-                       AC_MEMCPY( &temp_base_dn[ 1 ], bsi->base_dn->bv_val,
-                               bsi->base_dn->bv_len + 1 );
-                       ldap_pvt_str2upper( &temp_base_dn[ 1 ] );
+                       AC_MEMCPY( &temp_base_dn[ 1 ], bsi->bsi_base_dn->bv_val,
+                               bsi->bsi_base_dn->bv_len + 1 );
                }
+               ldap_pvt_str2upper( temp_base_dn );
 
-               Debug( LDAP_DEBUG_TRACE, "dn '%s'\n", temp_base_dn, 0, 0 );
+               Debug( LDAP_DEBUG_TRACE, "(sub)dn: '%s'\n", temp_base_dn,
+                               0, 0 );
 
                rc = backsql_BindParamStr( sth, 2, temp_base_dn, 
                                BACKSQL_MAX_DN_LEN );
@@ -914,30 +1065,35 @@ backsql_oc_get_candidates( backsql_oc_map_rec *oc, backsql_srch_info *bsi )
                        Debug( LDAP_DEBUG_TRACE, "backsql_oc_get_candidates(): "
                                "error binding base_dn parameter (2)\n",
                                0, 0, 0 );
-                       backsql_PrintErrors( bsi->bi->db_env, bsi->dbh, 
+                       backsql_PrintErrors( bi->db_env, bsi->bsi_dbh, 
                                        sth, rc );
+                       bsi->bsi_status = LDAP_OTHER;
                        return BACKSQL_CONTINUE;
                }
                break;
        }
 
        case LDAP_SCOPE_ONELEVEL:
-               res = backsql_dn2id( bsi->bi, &base_id, 
-                               bsi->dbh, bsi->base_dn );
+               res = backsql_dn2id( bi, &base_id, 
+                               bsi->bsi_dbh, bsi->bsi_base_dn );
                if ( res != LDAP_SUCCESS ) {
                        Debug( LDAP_DEBUG_TRACE, "backsql_oc_get_candidates(): "
                                "could not retrieve base_dn id%s\n",
                                res == LDAP_NO_SUCH_OBJECT ? ": no such entry"
                                : "", 0, 0 );
-                       bsi->status = res;
+                       bsi->bsi_status = res;
                        return BACKSQL_CONTINUE;
                }
                
+               Debug( LDAP_DEBUG_TRACE, "(one)id: '%lu'\n", base_id.id,
+                               0, 0 );
+
                rc = backsql_BindParamID( sth, 2, &base_id.id );
                backsql_free_entryID( &base_id, 0 );
                if ( rc != SQL_SUCCESS ) {
                        Debug( LDAP_DEBUG_TRACE, "backsql_oc_get_candidates(): "
                                "error binding base id parameter\n", 0, 0, 0 );
+                       bsi->bsi_status = LDAP_OTHER;
                        return BACKSQL_CONTINUE;
                }
                break;
@@ -947,8 +1103,9 @@ backsql_oc_get_candidates( backsql_oc_map_rec *oc, backsql_srch_info *bsi )
        if ( !BACKSQL_SUCCESS( rc ) ) {
                Debug( LDAP_DEBUG_TRACE, "backsql_oc_get_candidates(): "
                        "error executing query\n", 0, 0, 0 );
-               backsql_PrintErrors( bsi->bi->db_env, bsi->dbh, sth, rc );
+               backsql_PrintErrors( bi->db_env, bsi->bsi_dbh, sth, rc );
                SQLFreeStmt( sth, SQL_DROP );
+               bsi->bsi_status = LDAP_OTHER;
                return BACKSQL_CONTINUE;
        }
 
@@ -959,97 +1116,86 @@ backsql_oc_get_candidates( backsql_oc_map_rec *oc, backsql_srch_info *bsi )
                                sizeof( backsql_entryID ) );
                c_id->id = strtol( row.cols[ 0 ], NULL, 0 );
                c_id->keyval = strtol( row.cols[ 1 ], NULL, 0 );
-               c_id->oc_id = bsi->oc->id;
+               c_id->oc_id = bsi->bsi_oc->bom_id;
                ber_str2bv( row.cols[ 3 ], 0, 1, &c_id->dn );
-               c_id->next = bsi->id_list;
-               bsi->id_list = c_id;
-               bsi->n_candidates--;
+               c_id->next = bsi->bsi_id_list;
+               bsi->bsi_id_list = c_id;
+               bsi->bsi_n_candidates--;
 
                Debug( LDAP_DEBUG_TRACE, "backsql_oc_get_candidates(): "
                        "added entry id=%ld, keyval=%ld dn='%s'\n",
                        c_id->id, c_id->keyval, row.cols[ 3 ] );
 
-               if ( bsi->n_candidates == -1 ) {
+               if ( bsi->bsi_n_candidates == -1 ) {
                        break;
                }
        }
        backsql_FreeRow( &row );
        SQLFreeStmt( sth, SQL_DROP );
 
-       Debug( LDAP_DEBUG_TRACE, "<==backsql_oc_get_candidates()\n", 0, 0, 0 );
+       Debug( LDAP_DEBUG_TRACE, "<==backsql_oc_get_candidates(): %d\n",
+                       n_candidates - bsi->bsi_n_candidates, 0, 0 );
 
-       return ( bsi->n_candidates == -1 ? BACKSQL_STOP : BACKSQL_CONTINUE );
+       return ( bsi->bsi_n_candidates == -1 ? BACKSQL_STOP : BACKSQL_CONTINUE );
 }
 
 int
-backsql_search(
-       BackendDB       *be,
-       Connection      *conn,
-       Operation       *op,
-       struct berval   *base,
-       struct berval   *nbase,
-       int             scope,
-       int             deref,
-       int             slimit,
-       int             tlimit,
-       Filter          *filter,
-       struct berval   *filterstr,
-       AttributeName   *attrs,
-       int             attrsonly )
+backsql_search( Operation *op, SlapReply *rs )
 {
-       backsql_info            *bi = (backsql_info *)be->be_private;
+       backsql_info            *bi = (backsql_info *)op->o_bd->be_private;
        SQLHDBC                 dbh;
        int                     sres;
-       int                     nentries;
        Entry                   *entry, *res;
-       int                     manageDSAit = get_manageDSAit( op );
-       BerVarray               v2refs = NULL;
+       int                     manageDSAit;
        time_t                  stoptime = 0;
        backsql_srch_info       srch_info;
        backsql_entryID         *eid = NULL;
        struct slap_limits_set  *limit = NULL;
        int                     isroot = 0;
 
+       manageDSAit = get_manageDSAit( op );
+
        Debug( LDAP_DEBUG_TRACE, "==>backsql_search(): "
                "base='%s', filter='%s', scope=%d,", 
-               nbase->bv_val, filterstr->bv_val, scope );
+               op->o_req_ndn.bv_val,
+               op->oq_search.rs_filterstr.bv_val,
+               op->oq_search.rs_scope );
        Debug( LDAP_DEBUG_TRACE, " deref=%d, attrsonly=%d, "
                "attributes to load: %s\n",
-               deref, attrsonly, attrs == NULL ? "all" : "custom list" );
+               op->oq_search.rs_deref,
+               op->oq_search.rs_attrsonly,
+               op->oq_search.rs_attrs == NULL ? "all" : "custom list" );
 
-       if ( nbase->bv_len > BACKSQL_MAX_DN_LEN ) {
+       if ( op->o_req_ndn.bv_len > BACKSQL_MAX_DN_LEN ) {
                Debug( LDAP_DEBUG_TRACE, "backsql_search(): "
                        "search base length (%ld) exceeds max length (%ld)\n", 
-                       nbase->bv_len, BACKSQL_MAX_DN_LEN, 0 );
+                       op->o_req_ndn.bv_len, BACKSQL_MAX_DN_LEN, 0 );
                /*
                 * FIXME: a LDAP_NO_SUCH_OBJECT could be appropriate
                 * since it is impossible that such a long DN exists
                 * in the backend
                 */
-               send_ldap_result( conn, op, LDAP_ADMINLIMIT_EXCEEDED, 
-                               "", NULL, NULL, NULL );
+               rs->sr_err = LDAP_ADMINLIMIT_EXCEEDED;
+               send_ldap_result( op, rs );
                return 1;
        }
 
-       sres = backsql_get_db_conn( be, conn, &dbh );
+       sres = backsql_get_db_conn( op, &dbh );
        if ( sres != LDAP_SUCCESS ) {
                Debug( LDAP_DEBUG_TRACE, "backsql_search(): "
                        "could not get connection handle - exiting\n", 
                        0, 0, 0 );
-               send_ldap_result( conn, op, sres, "",
-                               sres == LDAP_OTHER ?  "SQL-backend error" : "",
-                               NULL, NULL );
+               rs->sr_err = sres;
+               rs->sr_text = sres == LDAP_OTHER ?  "SQL-backend error" : NULL;
+               send_ldap_result( op, rs );
                return 1;
        }
 
-       /* TimesTen : Pass it along to the lower level routines */ 
-       srch_info.use_reverse_dn = BACKSQL_USE_REVERSE_DN( bi ); 
        /* if not root, get appropriate limits */
-       if ( be_isroot( be, &op->o_ndn ) ) {
+       if ( be_isroot( op->o_bd, &op->o_ndn ) ) {
                isroot = 1;
        } else {
-               ( void ) get_limits( be, &op->o_ndn, &limit );
+               ( void ) get_limits( op->o_bd, &op->o_ndn, &limit );
        }
 
        /* The time/size limits come first because they require very little
@@ -1058,32 +1204,31 @@ backsql_search(
 
        /* if no time limit requested, use soft limit (unless root!) */
        if ( isroot ) {
-               if ( tlimit == 0 ) {
-                       tlimit = -1;    /* allow root to set no limit */
+               if ( op->oq_search.rs_tlimit == 0 ) {
+                       op->oq_search.rs_tlimit = -1;   /* allow root to set no limit */
                }
 
-               if ( slimit == 0 ) {
-                       slimit = -1;
+               if ( op->oq_search.rs_slimit == 0 ) {
+                       op->oq_search.rs_slimit = -1;
                }
 
        } else {
                /* if no limit is required, use soft limit */
-               if ( tlimit <= 0 ) {
-                       tlimit = limit->lms_t_soft;
+               if ( op->oq_search.rs_tlimit <= 0 ) {
+                       op->oq_search.rs_tlimit = limit->lms_t_soft;
 
                /* if requested limit higher than hard limit, abort */
-               } else if ( tlimit > limit->lms_t_hard ) {
+               } else if ( op->oq_search.rs_tlimit > limit->lms_t_hard ) {
                        /* no hard limit means use soft instead */
                        if ( limit->lms_t_hard == 0
                                        && limit->lms_t_soft > -1
-                                       && tlimit > limit->lms_t_soft ) {
-                               tlimit = limit->lms_t_soft;
+                                       && op->oq_search.rs_tlimit > limit->lms_t_soft ) {
+                               op->oq_search.rs_tlimit = limit->lms_t_soft;
 
                        /* positive hard limit means abort */
                        } else if ( limit->lms_t_hard > 0 ) {
-                               send_search_result( conn, op, 
-                                               LDAP_ADMINLIMIT_EXCEEDED,
-                                               NULL, NULL, NULL, NULL, 0 );
+                               rs->sr_err = LDAP_ADMINLIMIT_EXCEEDED;
+                               send_ldap_result( op, rs );
                                return 0;
                        }
                
@@ -1091,22 +1236,21 @@ backsql_search(
                }
                
                /* if no limit is required, use soft limit */
-               if ( slimit <= 0 ) {
-                       slimit = limit->lms_s_soft;
+               if ( op->oq_search.rs_slimit <= 0 ) {
+                       op->oq_search.rs_slimit = limit->lms_s_soft;
 
                /* if requested limit higher than hard limit, abort */
-               } else if ( slimit > limit->lms_s_hard ) {
+               } else if ( op->oq_search.rs_slimit > limit->lms_s_hard ) {
                        /* no hard limit means use soft instead */
                        if ( limit->lms_s_hard == 0
                                        && limit->lms_s_soft > -1
-                                       && slimit > limit->lms_s_soft ) {
-                               slimit = limit->lms_s_soft;
+                                       && op->oq_search.rs_slimit > limit->lms_s_soft ) {
+                               op->oq_search.rs_slimit = limit->lms_s_soft;
 
                        /* positive hard limit means abort */
                        } else if ( limit->lms_s_hard > 0 ) {
-                               send_search_result( conn, op, 
-                                               LDAP_ADMINLIMIT_EXCEEDED,
-                                               NULL, NULL, NULL, NULL, 0 );
+                               rs->sr_err = LDAP_ADMINLIMIT_EXCEEDED;
+                               send_ldap_result( op, rs );
                                return 0;
                        }
                        
@@ -1115,37 +1259,37 @@ backsql_search(
        }
 
        /* compute it anyway; root does not use it */
-       stoptime = op->o_time + tlimit;
+       stoptime = op->o_time + op->oq_search.rs_tlimit;
 
-       backsql_init_search( &srch_info, bi, nbase, scope,
-                       slimit, tlimit, stoptime, filter, dbh,
-                       be, conn, op, attrs );
+       backsql_init_search( &srch_info, &op->o_req_dn,
+                       op->oq_search.rs_scope,
+                       op->oq_search.rs_slimit, op->oq_search.rs_tlimit,
+                       stoptime, op->oq_search.rs_filter,
+                       dbh, op, op->oq_search.rs_attrs );
 
        /*
         * for each objectclass we try to construct query which gets IDs
         * of entries matching LDAP query filter and scope (or at least 
         * candidates), and get the IDs
         */
-       srch_info.n_candidates = ( isroot ? -2 : limit->lms_s_unchecked == -1 
+       srch_info.bsi_n_candidates = ( isroot ? -2 : limit->lms_s_unchecked == -1 
                        ? -2 : limit->lms_s_unchecked );
-       avl_apply( bi->oc_by_oc, (AVL_APPLY)backsql_oc_get_candidates,
+       avl_apply( bi->oc_by_oc, backsql_oc_get_candidates,
                        &srch_info, BACKSQL_STOP, AVL_INORDER );
        if ( !isroot && limit->lms_s_unchecked != -1 ) {
-               if ( srch_info.n_candidates == -1 ) {
-                       send_search_result( conn, op,
-                                       LDAP_ADMINLIMIT_EXCEEDED,
-                                       NULL, NULL, NULL, NULL, 0 );
+               if ( srch_info.bsi_n_candidates == -1 ) {
+                       rs->sr_err = LDAP_ADMINLIMIT_EXCEEDED;
+                       send_ldap_result( op, rs );
                        goto done;
                }
        }
        
-       nentries = 0;
        /*
         * now we load candidate entries (only those attributes 
         * mentioned in attrs and filter), test it against full filter 
         * and then send to client
         */
-       for ( eid = srch_info.id_list; eid != NULL; 
+       for ( eid = srch_info.bsi_id_list; eid != NULL; 
                        eid = backsql_free_entryID( eid, 1 ) ) {
                Attribute       *hasSubordinate = NULL,
                                *a = NULL;
@@ -1156,9 +1300,13 @@ backsql_search(
                }
 
                /* check time limit */
-               if ( tlimit != -1 && slap_get_time() > stoptime ) {
-                       send_search_result( conn, op, LDAP_TIMELIMIT_EXCEEDED,
-                               NULL, NULL, v2refs, NULL, nentries );
+               if ( op->oq_search.rs_tlimit != -1 && slap_get_time() > stoptime ) {
+                       rs->sr_err = LDAP_TIMELIMIT_EXCEEDED;
+                       rs->sr_ctrls = NULL;
+                       rs->sr_ref = rs->sr_v2ref;
+                       rs->sr_err = (rs->sr_v2ref == NULL) ? LDAP_SUCCESS
+                               : LDAP_REFERRAL;
+                       send_ldap_result( op, rs );
                        goto end_of_search;
                }
 
@@ -1175,14 +1323,34 @@ backsql_search(
                        continue;
                }
 
-               if ( !manageDSAit && scope != LDAP_SCOPE_BASE &&
-                       is_entry_referral( entry ) ) {
-                       BerVarray refs = get_entry_referrals( be, conn,
-                                       op, entry );
+               if ( !manageDSAit &&
+                               op->oq_search.rs_scope != LDAP_SCOPE_BASE &&
+                               is_entry_referral( entry ) ) {
+                       BerVarray refs;
+                       struct berval matched_dn;
+
+                       ber_dupbv( &matched_dn, &entry->e_name );
+                       refs = get_entry_referrals( op, entry );
+                       if ( refs ) {
+                               rs->sr_ref = referral_rewrite( refs,
+                                               &matched_dn, &op->o_req_dn,
+                                               op->oq_search.rs_scope );
+                               ber_bvarray_free( refs );
+                       }
+
+                       if ( !rs->sr_ref ) {
+                               rs->sr_text = "bad_referral object";
+                       }
+
+                       rs->sr_err = LDAP_REFERRAL;
+                       rs->sr_matched = matched_dn.bv_val;
+                       send_search_reference( op, rs );
+
+                       ber_bvarray_free( rs->sr_ref );
+                       rs->sr_ref = NULL;
+                       ber_memfree( matched_dn.bv_val );
+                       rs->sr_matched = NULL;
 
-                       send_search_reference( be, conn, op, entry, refs, 
-                                       NULL, &v2refs );
-                       ber_bvarray_free( refs );
                        continue;
                }
 
@@ -1224,10 +1392,10 @@ backsql_search(
                        }
                }
 
-               if ( test_filter( be, conn, op, entry, filter ) 
+               if ( test_filter( op, entry, op->oq_search.rs_filter )
                                == LDAP_COMPARE_TRUE ) {
                        if ( hasSubordinate && !( srch_info.bsi_flags & BSQL_SF_ALL_OPER ) 
-                                       && !ad_inlist( slap_schema.si_ad_hasSubordinates, attrs ) ) {
+                                       && !ad_inlist( slap_schema.si_ad_hasSubordinates, op->oq_search.rs_attrs ) ) {
                                a->a_next = NULL;
                                attr_free( hasSubordinate );
                                hasSubordinate = NULL;
@@ -1238,15 +1406,17 @@ backsql_search(
                                sres = 0;
                        } else {
 #endif
-                               sres = send_search_entry( be, conn, op, entry,
-                                               attrs, attrsonly, NULL );
+                               rs->sr_attrs = op->oq_search.rs_attrs;
+                               rs->sr_entry = entry;
+                               sres = send_search_entry( op, rs );
+                               rs->sr_entry = NULL;
+                               rs->sr_attrs = NULL;
 #if 0
                        }
 #endif
 
                        switch ( sres ) {
                        case 0:
-                               nentries++;
                                break;
 
                        case -1:
@@ -1264,26 +1434,32 @@ backsql_search(
                }
                entry_free( entry );
 
-               if ( slimit != -1 && nentries >= slimit ) {
-                       send_search_result( conn, op, LDAP_SIZELIMIT_EXCEEDED,
-                               NULL, NULL, v2refs, NULL, nentries );
+               if ( op->oq_search.rs_slimit != -1 
+                               && rs->sr_nentries >= op->oq_search.rs_slimit ) {
+                       rs->sr_err = LDAP_SIZELIMIT_EXCEEDED;
+                       send_ldap_result( op, rs );
                        goto end_of_search;
                }
        }
 
 end_of_search:;
 
-       if ( nentries > 0 ) {
-               send_search_result( conn, op,
-                       v2refs == NULL ? LDAP_SUCCESS : LDAP_REFERRAL,
-                       NULL, NULL, v2refs, NULL, nentries );
+       if ( rs->sr_nentries > 0 ) {
+               rs->sr_ref = rs->sr_v2ref;
+               rs->sr_err = (rs->sr_v2ref == NULL) ? LDAP_SUCCESS
+                       : LDAP_REFERRAL;
        } else {
-               send_ldap_result( conn, op, srch_info.status,
-                               NULL, NULL, NULL, 0 );
+               rs->sr_err = srch_info.bsi_status;
        }
-       
+       send_ldap_result( op, rs );
+
+       if ( rs->sr_v2ref ) {
+               ber_bvarray_free( rs->sr_v2ref );
+               rs->sr_v2ref = NULL;
+       }
+
 done:;
-       ch_free( srch_info.attrs );
+       ch_free( srch_info.bsi_attrs );
 
        Debug( LDAP_DEBUG_TRACE, "<==backsql_search()\n", 0, 0, 0 );
        return 0;