]> git.sur5r.net Git - openldap/blobdiff - servers/slapd/result.c
Fix pkiUser
[openldap] / servers / slapd / result.c
index 8c96ff0239683f6f1b0d69de9297b65ec2e695af..d2def63547477610f7dab2e16c2fcd3d26729537 100644 (file)
@@ -134,7 +134,7 @@ static long send_ldap_ber(
 
 #ifdef NEW_LOGGING
                LDAP_LOG(( "operation", LDAP_LEVEL_ERR,
-                          "send_ldap_ber: conn %d  ber_flush failed err=%d (%s)\n",
+                          "send_ldap_ber: conn %lu  ber_flush failed err=%d (%s)\n",
                           conn ? conn->c_connid : 0, err, sock_errstr(err) ));
 #else
                Debug( LDAP_DEBUG_CONNS, "ber_flush failed errno=%d reason=\"%s\"\n",
@@ -198,18 +198,18 @@ send_ldap_response(
 
 #ifdef NEW_LOGGING
        LDAP_LOG(( "operation", LDAP_LEVEL_ENTRY,
-                  "send_ldap_response: conn %d  msgid=%ld tag=%ld err=%ld\n",
-                  conn ? conn->c_connid : 0, (long)msgid, (long)tag, (long)err ));
+                  "send_ldap_response: conn %lu         msgid=%d tag=%lu err=%d\n",
+                  conn ? conn->c_connid : 0, msgid, tag, err ));
 #else
        Debug( LDAP_DEBUG_TRACE,
-               "send_ldap_response: msgid=%ld tag=%ld err=%ld\n",
-               (long) msgid, (long) tag, (long) err );
+               "send_ldap_response: msgid=%d tag=%lu err=%d\n",
+               msgid, tag, err );
 #endif
 
        if( ref ) {
 #ifdef NEW_LOGGING
                LDAP_LOG(( "operation", LDAP_LEVEL_ARGS,
-                          "send_ldap_response: conn %d  ref=\"%s\"\n",
+                          "send_ldap_response: conn %lu  ref=\"%s\"\n",
                           conn ? conn->c_connid : 0,
                           ref[0].bv_val ? ref[0].bv_val : "NULL" ));
 #else
@@ -226,7 +226,7 @@ send_ldap_response(
            if (rc != sizeof(struct sockaddr)) {
 #ifdef NEW_LOGGING
                LDAP_LOG(( "operation", LDAP_LEVEL_ERR,
-                          "send_ldap_response: conn %d  ber_write failed\n",
+                          "send_ldap_response: conn %lu  ber_write failed\n",
                           conn ? conn->c_connid : 0 ));
 #else
                Debug( LDAP_DEBUG_ANY, "ber_write failed\n", 0, 0, 0 );
@@ -236,14 +236,14 @@ send_ldap_response(
            }
        }
        if (conn->c_is_udp && op->o_protocol == LDAP_VERSION2) {
-           rc = ber_printf( ber, "{is{t{ess",
+           rc = ber_printf( ber, "{is{t{ess" /*"}}}"*/,
                msgid, "", tag, err,
                matched == NULL ? "" : matched,
                text == NULL ? "" : text );
        } else
 #endif
        {
-           rc = ber_printf( ber, "{it{ess",
+           rc = ber_printf( ber, "{it{ess" /*"}}"*/,
                msgid, tag, err,
                matched == NULL ? "" : matched,
                text == NULL ? "" : text );
@@ -275,18 +275,18 @@ send_ldap_response(
        }
 
        if( rc != -1 ) {
-               rc = ber_printf( ber, "N}N}" );
+               rc = ber_printf( ber, /*"{{"*/ "N}N}" );
        }
 #ifdef LDAP_CONNECTIONLESS
        if( conn->c_is_udp && op->o_protocol == LDAP_VERSION2 && rc != -1 ) {
-               rc = ber_printf( ber, "N}" );
+               rc = ber_printf( ber, /*"{"*/ "N}" );
        }
 #endif
 
        if ( rc == -1 ) {
 #ifdef NEW_LOGGING
                LDAP_LOG(( "operation", LDAP_LEVEL_ERR,
-                          "send_ldap_response: conn %d  ber_printf failed\n",
+                          "send_ldap_response: conn %lu  ber_printf failed\n",
                           conn ? conn->c_connid : 0 ));
 #else
                Debug( LDAP_DEBUG_ANY, "ber_printf failed\n", 0, 0, 0 );
@@ -303,7 +303,7 @@ send_ldap_response(
        if ( bytes < 0 ) {
 #ifdef NEW_LOGGING
                LDAP_LOG(( "operation", LDAP_LEVEL_ERR,
-                          "send_ldap_response: conn %d ber write failed\n",
+                          "send_ldap_response: conn %lu ber write failed\n",
                           conn ? conn->c_connid : 0 ));
 #else
                Debug( LDAP_DEBUG_ANY,
@@ -343,7 +343,7 @@ send_ldap_disconnect(
 
 #ifdef NEW_LOGGING
        LDAP_LOG(( "operation", LDAP_LEVEL_ENTRY,
-                  "send_ldap_disconnect: conn %d  %d:%s\n",
+                  "send_ldap_disconnect: conn %lu  %d:%s\n",
                   conn ? conn->c_connid : 0, err, text ? text : "" ));
 #else
        Debug( LDAP_DEBUG_TRACE,
@@ -368,9 +368,8 @@ send_ldap_disconnect(
                reqoid, NULL, NULL, NULL );
 
        Statslog( LDAP_DEBUG_STATS,
-           "conn=%ld op=%ld DISCONNECT tag=%lu err=%ld text=%s\n",
-               (long) op->o_connid, (long) op->o_opid,
-               (unsigned long) tag, (long) err, text ? text : "" );
+           "conn=%lu op=%lu DISCONNECT tag=%lu err=%d text=%s\n",
+               op->o_connid, op->o_opid, tag, err, text ? text : "" );
 }
 
 void
@@ -392,18 +391,18 @@ send_ldap_result(
 
 #ifdef NEW_LOGGING
        LDAP_LOG(( "operation", LDAP_LEVEL_ENTRY,
-                  "send_ldap_result : conn %ld   op=%ld p=%d\n",
-                  (long)op->o_connid, (long)op->o_opid, op->o_protocol ));
+                  "send_ldap_result : conn %lu   op=%lu p=%d\n",
+                  op->o_connid, op->o_opid, op->o_protocol ));
 #else
        Debug( LDAP_DEBUG_TRACE,
-               "send_ldap_result: conn=%ld op=%ld p=%d\n",
-               (long) op->o_connid, (long) op->o_opid, op->o_protocol );
+               "send_ldap_result: conn=%lu op=%lu p=%d\n",
+               op->o_connid, op->o_opid, op->o_protocol );
 #endif
 
 #ifdef NEW_LOGGING
        LDAP_LOG(( "operation", LDAP_LEVEL_ARGS,
-                  "send_ldap_result: conn=%ld err=%d matched=\"%s\" text=\"%s\"\n",
-                  (long)op->o_connid, err, matched ? matched : "", text ? text : "" ));
+                  "send_ldap_result: conn=%lu err=%d matched=\"%s\" text=\"%s\"\n",
+                  op->o_connid, err, matched ? matched : "", text ? text : "" ));
 #else
        Debug( LDAP_DEBUG_ARGS,
                "send_ldap_result: err=%d matched=\"%s\" text=\"%s\"\n",
@@ -448,9 +447,8 @@ send_ldap_result(
                NULL, NULL, NULL, ctrls );
 
        Statslog( LDAP_DEBUG_STATS,
-           "conn=%ld op=%ld RESULT tag=%lu err=%ld text=%s\n",
-               (long) op->o_connid, (long) op->o_opid,
-               (unsigned long) tag, (long) err, text ? text : "" );
+           "conn=%lu op=%lu RESULT tag=%lu err=%d text=%s\n",
+               op->o_connid, op->o_opid, tag, err, text ? text : "" );
 
        if( tmp != NULL ) {
                ch_free(tmp);
@@ -474,11 +472,11 @@ send_ldap_sasl(
 
 #ifdef NEW_LOGGING
        LDAP_LOG(( "operation", LDAP_LEVEL_ENTRY,
-                  "send_ldap_sasl: conn %d err=%ld len=%ld\n",
-                  op->o_connid, (long)err, cred ? cred->bv_len : -1 ));
+                  "send_ldap_sasl: conn %lu err=%d len=%lu\n",
+                  op->o_connid, err, cred ? cred->bv_len : -1 ));
 #else
-       Debug( LDAP_DEBUG_TRACE, "send_ldap_sasl: err=%ld len=%ld\n",
-               (long) err, cred ? cred->bv_len : -1, NULL );
+       Debug( LDAP_DEBUG_TRACE, "send_ldap_sasl: err=%d len=%ld\n",
+               err, cred ? (long) cred->bv_len : -1, NULL );
 #endif
 
 
@@ -508,15 +506,15 @@ send_ldap_extended(
 
 #ifdef NEW_LOGGING
        LDAP_LOG(( "operation", LDAP_LEVEL_ENTRY,
-                  "send_ldap_extended: conn %d  err=%ld oid=%s len=%ld\n",
-                  op->o_connid, (long)err, rspoid ? rspoid : "",
-                  rspdata != NULL ? (long)rspdata->bv_len : (long)0 ));
+                  "send_ldap_extended: conn %lu         err=%d oid=%s len=%ld\n",
+                  op->o_connid, err, rspoid ? rspoid : "",
+                  rspdata != NULL ? rspdata->bv_len : 0 ));
 #else
        Debug( LDAP_DEBUG_TRACE,
-               "send_ldap_extended err=%ld oid=%s len=%ld\n",
-               (long) err,
+               "send_ldap_extended err=%d oid=%s len=%ld\n",
+               err,
                rspoid ? rspoid : "",
-               rspdata != NULL ? (long) rspdata->bv_len : (long) 0 );
+               rspdata != NULL ? rspdata->bv_len : 0 );
 #endif
 
 
@@ -555,7 +553,8 @@ send_search_result(
 
 #ifdef NEW_LOGGING
        LDAP_LOG(( "operation", LDAP_LEVEL_ENTRY,
-                  "send_search_result: conn %d err=%d matched=\"%s\"\n",
+                  "send_search_result: conn %lu err=%d "
+                  "matched=\"%s\" text=\"%s\"\n",
                   op->o_connid, err, matched ? matched : "",
                   text ? text : "" ));
 #else
@@ -594,10 +593,14 @@ send_search_result(
                err, matched, text, refs,
                NULL, NULL, NULL, ctrls );
 
+       {
+       char nbuf[64];
+       sprintf( nbuf, "%d nentries=%d", err, nentries );
+
        Statslog( LDAP_DEBUG_STATS,
-           "conn=%ld op=%ld SEARCH RESULT tag=%lu err=%ld text=%s\n",
-               (long) op->o_connid, (long) op->o_opid,
-               (unsigned long) tag, (long) err, text ? text : "" );
+           "conn=%lu op=%lu SEARCH RESULT tag=%lu err=%s text=%s\n",
+               op->o_connid, op->o_opid, tag, nbuf, text ? text : "" );
+       }
 
        if (tmp != NULL) {
            ch_free(tmp);
@@ -623,7 +626,7 @@ send_search_entry(
        char            berbuf[256];
        BerElement      *ber = (BerElement *)berbuf;
        Attribute       *a, *aa;
-       int             i, rc=-1, bytes;
+       int             i, j, rc=-1, bytes;
        char            *edn;
        int             userattrs;
        int             opattrs;
@@ -632,6 +635,12 @@ send_search_entry(
 
        AttributeDescription *ad_entry = slap_schema.si_ad_entry;
 
+       /* a_flags: array of flags telling if the i-th element will be
+        *          returned or filtered out
+        * e_flags: array of a_flags
+        */
+       char *a_flags, **e_flags;
+
        if (op->o_callback && op->o_callback->sc_sendentry) {
                return op->o_callback->sc_sendentry( be, conn, op, e, attrs,
                        attrsonly, ctrls );
@@ -639,7 +648,7 @@ send_search_entry(
 
 #ifdef NEW_LOGGING
        LDAP_LOG(( "operation", LDAP_LEVEL_ENTRY,
-                  "send_search_entry: conn % dn=\"%s\"%s\n",
+                  "send_search_entry: conn %lu dn=\"%s\"%s\n",
                   op->o_connid, e->e_dn,
                   attrsonly ? " (attrsOnly)" : "" ));
 #else
@@ -653,7 +662,8 @@ send_search_entry(
        {
 #ifdef NEW_LOGGING
                LDAP_LOG(( "acl", LDAP_LEVEL_INFO,
-                          "send_search_entry: conn %d access to entry (%s) not allowed\n",
+                          "send_search_entry: conn %lu access "
+                          "to entry (%s) not allowed\n",
                           op->o_connid, e->e_dn ));
 #else
                Debug( LDAP_DEBUG_ACL,
@@ -674,7 +684,7 @@ send_search_entry(
            if (rc != sizeof(struct sockaddr)) {
 #ifdef NEW_LOGGING
                LDAP_LOG(( "operation", LDAP_LEVEL_ERR,
-                          "send_search_entry: conn %d  ber_printf failed\n",
+                          "send_search_entry: conn %lu  ber_printf failed\n",
                           conn ? conn->c_connid : 0 ));
 #else
                Debug( LDAP_DEBUG_ANY, "ber_printf failed\n", 0, 0, 0 );
@@ -687,7 +697,7 @@ send_search_entry(
            rc = ber_printf( ber, "{is{t{O{" /*}}}*/,
                op->o_msgid, "", LDAP_RES_SEARCH_ENTRY, &e->e_name );
        } else
-#endif
+#endif /* LDAP_CONNECTIONLESS */
        {
            rc = ber_printf( ber, "{it{O{" /*}}}*/, op->o_msgid,
                LDAP_RES_SEARCH_ENTRY, &e->e_name );
@@ -696,7 +706,7 @@ send_search_entry(
        if ( rc == -1 ) {
 #ifdef NEW_LOGGING
                LDAP_LOG(( "operation", LDAP_LEVEL_ERR,
-                          "send_search_entry: conn %d  ber_printf failed\n",
+                          "send_search_entry: conn %lu  ber_printf failed\n",
                           op->o_connid ));
 #else
                Debug( LDAP_DEBUG_ANY, "ber_printf failed\n", 0, 0, 0 );
@@ -716,7 +726,57 @@ send_search_entry(
        opattrs = ( attrs == NULL ) ? 0
                : an_find( attrs, &AllOper );
 
-       for ( a = e->e_attrs; a != NULL; a = a->a_next ) {
+       /* create an array of arrays of flags. Each flag corresponds
+        * to particular value of attribute and equals 1 if value matches
+        * to ValuesReturnFilter or 0 if not
+        */     
+       for ( a = e->e_attrs, i=0; a != NULL; a = a->a_next ) i++;
+       e_flags = ch_malloc ( i * sizeof(a_flags) );
+       
+       for ( a = e->e_attrs, i=0; a != NULL; a = a->a_next, i++ ) {
+               for ( j = 0; a->a_vals[j].bv_val != NULL; j++ );
+
+               if( j ) {
+                       a_flags = ch_calloc ( j, sizeof(char) );
+                       /* If no ValuesReturnFilter control return everything */
+                       if ( op->vrFilter == NULL ) {
+                               memset(a_flags, 1, j);
+                       }
+               } else {
+                       a_flags = NULL;
+               }
+               e_flags[i] = a_flags; 
+       }
+
+       if ( op->vrFilter != NULL ) { 
+               rc = filter_matched_values(be, conn, op, e->e_attrs, &e_flags) ; 
+           
+               if ( rc == -1 ) {
+#ifdef NEW_LOGGING
+                       LDAP_LOG(( "operation", LDAP_LEVEL_ERR,
+                               "send_search_entry: conn %lu "
+                               "matched values filtering failed\n",
+                               conn ? conn->c_connid : 0 ));
+#else
+               Debug( LDAP_DEBUG_ANY,
+                               "matched values filtering failed\n", 0, 0, 0 );
+#endif
+                       ber_free( ber, 1 );
+
+                       /* free e_flags */
+                       for ( a = e->e_attrs, i=0; a != NULL; a = a->a_next, i++ ) {
+                               free( e_flags[i] );
+                       }
+                       free( e_flags );
+
+                       send_ldap_result( conn, op, LDAP_OTHER,
+                               NULL, "matched values filtering error", 
+                               NULL, NULL );
+                       goto error_return;
+               }
+       }
+
+       for ( a = e->e_attrs, j = 0; a != NULL; a = a->a_next, j++ ) {
                AttributeDescription *desc = a->a_desc;
 
                if ( attrs == NULL ) {
@@ -746,7 +806,8 @@ send_search_entry(
                {
 #ifdef NEW_LOGGING
                        LDAP_LOG(( "acl", LDAP_LEVEL_INFO, "send_search_entry: "
-                               "conn %d  access to attribute %s not allowed\n",
+                               "conn %lu  access to attribute %s "
+                               "not allowed\n",
                                op->o_connid, desc->ad_cname.bv_val ));
 #else
                        Debug( LDAP_DEBUG_ACL, "acl: "
@@ -759,13 +820,19 @@ send_search_entry(
                if (( rc = ber_printf( ber, "{O[" /*]}*/ , &desc->ad_cname )) == -1 ) {
 #ifdef NEW_LOGGING
                        LDAP_LOG(( "operation", LDAP_LEVEL_ERR,
-                               "send_search_entry: conn %d  ber_printf failed\n",
+                               "send_search_entry: "
+                               "conn %lu  ber_printf failed\n",
                                op->o_connid ));
 #else
                        Debug( LDAP_DEBUG_ANY, "ber_printf failed\n", 0, 0, 0 );
 #endif
 
                        ber_free_buf( ber );
+                       /* free e_flags */
+                       for ( a = e->e_attrs, i=0; a != NULL; a = a->a_next, i++ ) {
+                               free( e_flags[i] );
+                       }
+                       free( e_flags );
                        send_ldap_result( conn, op, LDAP_OTHER,
                            NULL, "encoding description error", NULL, NULL );
                        goto error_return;
@@ -778,22 +845,30 @@ send_search_entry(
                                {
 #ifdef NEW_LOGGING
                                        LDAP_LOG(( "acl", LDAP_LEVEL_INFO,
-                                               "send_search_entry: conn %d "
-                                               "access to attribute %s, value %d not allowed\n",
-                                               op->o_connid, desc->ad_cname.bv_val, i ));
+                                               "send_search_entry: conn %lu "
+                                               "access to attribute %s, "
+                                               "value %d not allowed\n",
+                                               op->o_connid, 
+                                               desc->ad_cname.bv_val, i ));
 #else
                                        Debug( LDAP_DEBUG_ACL,
-                                               "acl: access to attribute %s, value %d not allowed\n",
-                                       desc->ad_cname.bv_val, i, 0 );
+                                               "acl: access to attribute %s, "
+                                               "value %d not allowed\n",
+                                               desc->ad_cname.bv_val, i, 0 );
 #endif
 
                                        continue;
                                }
 
+                               if ( e_flags[j][i] == 0 ){
+                                       continue;
+                               }
+
                                if (( rc = ber_printf( ber, "O", &a->a_vals[i] )) == -1 ) {
 #ifdef NEW_LOGGING
                                        LDAP_LOG(( "operation", LDAP_LEVEL_ERR,
-                                               "send_search_entry: conn %d  ber_printf failed.\n",
+                                               "send_search_entry: conn %lu  "
+                                               "ber_printf failed.\n",
                                                op->o_connid ));
 #else
                                        Debug( LDAP_DEBUG_ANY,
@@ -801,8 +876,14 @@ send_search_entry(
 #endif
 
                                        ber_free_buf( ber );
+                                       /* free e_flags */
+                                       for ( a = e->e_attrs, i=0; a != NULL; a = a->a_next, i++ ) {
+                                               free( e_flags[i] );
+                                       }
+                                       free( e_flags );
                                        send_ldap_result( conn, op, LDAP_OTHER,
-                                               NULL, "encoding values error", NULL, NULL );
+                                               NULL, "encoding values error",
+                                               NULL, NULL );
                                        goto error_return;
                                }
                        }
@@ -811,24 +892,78 @@ send_search_entry(
                if (( rc = ber_printf( ber, /*{[*/ "]N}" )) == -1 ) {
 #ifdef NEW_LOGGING
                        LDAP_LOG(( "operation", LDAP_LEVEL_ERR,
-                               "send_search_entry: conn %d  ber_printf failed\n",
+                               "send_search_entry: conn %lu  "
+                               "ber_printf failed\n",
                                op->o_connid ));
 #else
                        Debug( LDAP_DEBUG_ANY, "ber_printf failed\n", 0, 0, 0 );
 #endif
 
                        ber_free_buf( ber );
+                       /* free e_flags */
+                       for ( a = e->e_attrs, i=0; a != NULL; a = a->a_next, i++ ) {
+                               free( e_flags[i] );
+                       }
+                       free( e_flags );
                        send_ldap_result( conn, op, LDAP_OTHER,
                            NULL, "encode end error", NULL, NULL );
                        goto error_return;
                }
        }
 
+       /* free e_flags */
+       for ( a = e->e_attrs, i=0; a != NULL; a = a->a_next, i++ ) {
+               free( e_flags[i] );
+       }
+       free( e_flags );
+
        /* eventually will loop through generated operational attributes */
        /* only have subschemaSubentry implemented */
        aa = backend_operational( be, conn, op, e, attrs, opattrs );
+
+       for ( a = aa, i=0; a != NULL; a = a->a_next ) i++;
+       e_flags = ch_malloc ( i * sizeof(a_flags) );
        
-       for (a = aa ; a != NULL; a = a->a_next ) {
+       for ( a = aa, i=0; a != NULL; a = a->a_next, i++ ) {
+               for ( j = 0; a->a_vals[j].bv_val != NULL; j++ );
+
+               a_flags = ch_calloc ( j, sizeof(char) );
+               /* If no ValuesReturnFilter control return everything */
+               if ( op->vrFilter == NULL ){
+                   memset(a_flags, 1, j);
+               }
+               e_flags[i] = a_flags; 
+       }
+
+       if ( op->vrFilter != NULL ) {
+               rc = filter_matched_values(be, conn, op, aa, &e_flags) ; 
+           
+               if ( rc == -1 ) {
+#ifdef NEW_LOGGING
+                       LDAP_LOG(( "operation", LDAP_LEVEL_ERR,
+                               "send_search_entry: conn %lu "
+                               "matched values filtering failed\n",
+                               conn ? conn->c_connid : 0 ));
+#else
+               Debug( LDAP_DEBUG_ANY,
+                               "matched values filtering failed\n", 0, 0, 0 );
+#endif
+                       ber_free( ber, 1 );
+
+                       /* free e_flags */
+                       for ( a = aa, i=0; a != NULL; a = a->a_next, i++ ) {
+                               free( e_flags[i] );
+                       }
+                       free( e_flags );
+
+                       send_ldap_result( conn, op, LDAP_OTHER,
+                               NULL, "matched values filtering error", 
+                               NULL, NULL );
+                       goto error_return;
+               }
+       }
+
+       for (a = aa, j=0; a != NULL; a = a->a_next, j++ ) {
                AttributeDescription *desc = a->a_desc;
 
                if ( attrs == NULL ) {
@@ -858,12 +993,13 @@ send_search_entry(
                {
 #ifdef NEW_LOGGING
                        LDAP_LOG(( "acl", LDAP_LEVEL_INFO,
-                               "send_search_entry: conn %s "
+                               "send_search_entry: conn %lu "
                                "access to attribute %s not allowed\n",
                                op->o_connid, desc->ad_cname.bv_val ));
 #else
-                       Debug( LDAP_DEBUG_ACL, "acl: access to attribute %s not allowed\n",
-                           desc->ad_cname.bv_val, 0, 0 );
+                       Debug( LDAP_DEBUG_ACL, "acl: access to attribute %s "
+                                       "not allowed\n",
+                                       desc->ad_cname.bv_val, 0, 0 );
 #endif
 
                        continue;
@@ -873,7 +1009,8 @@ send_search_entry(
                if ( rc == -1 ) {
 #ifdef NEW_LOGGING
                        LDAP_LOG(( "operation", LDAP_LEVEL_ERR,
-                               "send_search_entry: conn %d  ber_printf failed\n",
+                               "send_search_entry: conn %lu  "
+                               "ber_printf failed\n",
                                op->o_connid ));
 #else
                        Debug( LDAP_DEBUG_ANY, "ber_printf failed\n", 0, 0, 0 );
@@ -882,6 +1019,12 @@ send_search_entry(
                        ber_free_buf( ber );
                        send_ldap_result( conn, op, LDAP_OTHER,
                            NULL, "encoding description error", NULL, NULL );
+                       /* free e_flags */
+                       for ( a = aa, i=0; a != NULL; a = a->a_next, i++ ) {
+                               free( e_flags[i] );
+                       }
+                       free( e_flags );
+
                        attrs_free( aa );
                        goto error_return;
                }
@@ -893,22 +1036,31 @@ send_search_entry(
                                {
 #ifdef NEW_LOGGING
                                        LDAP_LOG(( "acl", LDAP_LEVEL_INFO,
-                                               "send_search_entry: conn %d "
-                                               "access to %s, value %d not allowed\n",
-                                               op->o_connid, desc->ad_cname.bv_val, i ));
+                                               "send_search_entry: conn %lu "
+                                               "access to %s, value %d "
+                                               "not allowed\n",
+                                               op->o_connid, 
+                                               desc->ad_cname.bv_val, i ));
 #else
                                        Debug( LDAP_DEBUG_ACL,
-                                               "acl: access to attribute %s, value %d not allowed\n",
-                                       desc->ad_cname.bv_val, i, 0 );
+                                               "acl: access to attribute %s, "
+                                               "value %d not allowed\n",
+                                               desc->ad_cname.bv_val, i, 0 );
 #endif
 
                                        continue;
                                }
 
+                               if ( e_flags[j][i] == 0 ){
+                                       continue;
+                               }
+
                                if (( rc = ber_printf( ber, "O", &a->a_vals[i] )) == -1 ) {
 #ifdef NEW_LOGGING
                                        LDAP_LOG(( "operation", LDAP_LEVEL_ERR,
-                                                  "send_search_entry: conn %d  ber_printf failed\n",
+                                                  "send_search_entry: "
+                                                  "conn %lu  ber_printf "
+                                                  "failed\n",
                                                   op->o_connid ));
 #else
                                        Debug( LDAP_DEBUG_ANY,
@@ -917,7 +1069,14 @@ send_search_entry(
 
                                        ber_free_buf( ber );
                                        send_ldap_result( conn, op, LDAP_OTHER,
-                                               NULL, "encoding values error", NULL, NULL );
+                                               NULL, "encoding values error", 
+                                               NULL, NULL );
+                                       /* free e_flags */
+                                       for ( a = aa, i=0; a != NULL; a = a->a_next, i++ ) {
+                                               free( e_flags[i] );
+                                       }
+                                       free( e_flags );
+
                                        attrs_free( aa );
                                        goto error_return;
                                }
@@ -927,7 +1086,8 @@ send_search_entry(
                if (( rc = ber_printf( ber, /*{[*/ "]N}" )) == -1 ) {
 #ifdef NEW_LOGGING
                        LDAP_LOG(( "operation", LDAP_LEVEL_ERR,
-                                  "send_search_entry: conn %d  ber_printf failed\n",
+                                  "send_search_entry: conn %lu  "
+                                  "ber_printf failed\n",
                                   op->o_connid ));
 #else
                        Debug( LDAP_DEBUG_ANY, "ber_printf failed\n", 0, 0, 0 );
@@ -936,13 +1096,24 @@ send_search_entry(
                        ber_free_buf( ber );
                        send_ldap_result( conn, op, LDAP_OTHER,
                            NULL, "encode end error", NULL, NULL );
+                       /* free e_flags */
+                       for ( a = aa, i=0; a != NULL; a = a->a_next, i++ ) {
+                               free( e_flags[i] );
+                       }
+                       free( e_flags );
+
                        attrs_free( aa );
                        goto error_return;
                }
        }
 
-       attrs_free( aa );
+       /* free e_flags */
+       for ( a = aa, i=0; a != NULL; a = a->a_next, i++ ) {
+               free( e_flags[i] );
+       }
+       free( e_flags );
 
+       attrs_free( aa );
        rc = ber_printf( ber, /*{{{*/ "}N}N}" );
 
 #ifdef LDAP_CONNECTIONLESS
@@ -952,7 +1123,7 @@ send_search_entry(
        if ( rc == -1 ) {
 #ifdef NEW_LOGGING
                LDAP_LOG(( "operation", LDAP_LEVEL_ERR,
-                          "send_search_entry: conn %d ber_printf failed\n",
+                          "send_search_entry: conn %lu ber_printf failed\n",
                           op->o_connid ));
 #else
                Debug( LDAP_DEBUG_ANY, "ber_printf failed\n", 0, 0, 0 );
@@ -970,11 +1141,11 @@ send_search_entry(
        if ( bytes < 0 ) {
 #ifdef NEW_LOGGING
                LDAP_LOG(( "operation", LDAP_LEVEL_ERR,
-                          "send_ldap_response: conn %d  ber write failed.\n",
+                          "send_search_entry: conn %lu  ber write failed.\n",
                           op->o_connid ));
 #else
                Debug( LDAP_DEBUG_ANY,
-                       "send_ldap_response: ber write failed\n",
+                       "send_search_entry: ber write failed\n",
                        0, 0, 0 );
 #endif
 
@@ -987,12 +1158,12 @@ send_search_entry(
        num_pdu_sent++;
        ldap_pvt_thread_mutex_unlock( &num_sent_mutex );
 
-       Statslog( LDAP_DEBUG_STATS2, "conn=%ld op=%ld ENTRY dn=\"%s\"\n",
-           (long) conn->c_connid, (long) op->o_opid, e->e_dn, 0, 0 );
+       Statslog( LDAP_DEBUG_STATS2, "conn=%lu op=%lu ENTRY dn=\"%s\"\n",
+           conn->c_connid, op->o_opid, e->e_dn, 0, 0 );
 
 #ifdef NEW_LOGGING
        LDAP_LOG(( "operation", LDAP_LEVEL_ENTRY,
-                  "send_search_entry: conn %d exit.\n",
+                  "send_search_entry: conn %lu exit.\n",
                   op->o_connid ));
 #else
        Debug( LDAP_DEBUG_TRACE, "<= send_search_entry\n", 0, 0, 0 );
@@ -1025,7 +1196,7 @@ send_search_reference(
 
 #ifdef NEW_LOGGING
        LDAP_LOG(( "operation", LDAP_LEVEL_ENTRY,
-               "send_search_reference: conn %d  dn=\"%s\"\n",
+               "send_search_reference: conn %lu  dn=\"%s\"\n",
                op->o_connid, e->e_dn ));
 #else
        Debug( LDAP_DEBUG_TRACE,
@@ -1039,7 +1210,8 @@ send_search_reference(
        {
 #ifdef NEW_LOGGING
                LDAP_LOG(( "acl", LDAP_LEVEL_INFO,
-                       "send_search_reference: conn %d access to entry %s not allowed\n",
+                       "send_search_reference: conn %lu        "
+                       "access to entry %s not allowed\n",
                        op->o_connid, e->e_dn ));
 #else
                Debug( LDAP_DEBUG_ACL,
@@ -1055,11 +1227,13 @@ send_search_reference(
        {
 #ifdef NEW_LOGGING
                LDAP_LOG(( "acl", LDAP_LEVEL_INFO,
-                       "send_search_reference: conn %d access to reference not allowed.\n",
+                       "send_search_reference: conn %lu access "
+                       "to reference not allowed.\n",
                        op->o_connid ));
 #else
                Debug( LDAP_DEBUG_ACL,
-                       "send_search_reference: access to reference not allowed\n",
+                       "send_search_reference: access "
+                       "to reference not allowed\n",
                    0, 0, 0 );
 #endif
 
@@ -1069,7 +1243,7 @@ send_search_reference(
        if( refs == NULL ) {
 #ifdef NEW_LOGGING
                LDAP_LOG(( "operation", LDAP_LEVEL_ERR,
-                       "send_search_reference: null ref in (%s).\n",
+                       "send_search_reference: conn %lu null ref in (%s).\n",
                        op->o_connid, e->e_dn ));
 #else
                Debug( LDAP_DEBUG_ANY,
@@ -1096,7 +1270,8 @@ send_search_reference(
        if ( rc == -1 ) {
 #ifdef NEW_LOGGING
                LDAP_LOG(( "operation", LDAP_LEVEL_ERR,
-                       "send_search_reference: conn %d ber_printf failed.\n",
+                       "send_search_reference: conn %lu        "
+                       "ber_printf failed.\n",
                        op->o_connid ));
 #else
                Debug( LDAP_DEBUG_ANY,
@@ -1118,12 +1293,12 @@ send_search_reference(
        num_pdu_sent++;
        ldap_pvt_thread_mutex_unlock( &num_sent_mutex );
 
-       Statslog( LDAP_DEBUG_STATS2, "conn=%ld op=%ld REF dn=\"%s\"\n",
-               (long) conn->c_connid, (long) op->o_opid, e->e_dn, 0, 0 );
+       Statslog( LDAP_DEBUG_STATS2, "conn=%lu op=%lu REF dn=\"%s\"\n",
+               conn->c_connid, op->o_opid, e->e_dn, 0, 0 );
 
 #ifdef NEW_LOGGING
        LDAP_LOG(( "operation", LDAP_LEVEL_ENTRY,
-               "send_search_reference: conn %d exit.\n", op->o_connid ));
+               "send_search_reference: conn %lu exit.\n", op->o_connid ));
 #else
        Debug( LDAP_DEBUG_TRACE, "<= send_search_reference\n", 0, 0, 0 );
 #endif
@@ -1156,7 +1331,6 @@ str2result(
                    s, 0, 0 );
 #endif
 
-
                return( -1 );
        }