ldap_first_attribute() / ldap_next_attribute() handling of the BerElement has been changed (in devel only) to match the current IETF LDAPext draft C API spec. The caller of ldap_first_attribute() is now solely responsible for freeing the BerElement allocated and returned by this call using ber_free(ptr,0). Kurt