This issue has been discussed many times, and it should be clear enough
from slapo-dynlist(5) man page. Your expectation does not comply with
the rationale of dynlist. In fact, for your expectation to hold,
dynamic list expansion should occur __before__ filtering. A first
adverse consequence is that indexing would be impossible. A second
adverse consequence is that dynamic list expansion should __always__
occur for all dynamic entries that fall into the scope of any search.
This is technically possible, but it would likely be very costly. Feel
free to submit a patch that implements such design, but I'm pretty sure
most of the dynlist users (including perhaps yourself) would then start
complaining about the poor performances of databases that use that overlay.
p.
Ing. Pierangelo Masarati
OpenLDAP Core Team
SysNet s.n.c.
Via Dossi, 8 - 27100 Pavia - ITALIA
http://www.sys-net.it
------------------------------------------
Office: +39.02.23998309
Mobile: +39.333.4963172
Email: pierangelo.masarati@sys-net.it
------------------------------------------