Description of problem:
A physical ou is created (by an application) within a virtual DIT view
(presented to the application as its baseDN). Any search with the virtual DIT
view as baseDN and an additional search filter yields the physical ou even if
the ou obviously doesn't match the search filter.

Version-Release number of selected component (if applicable):
fedora-ds-7.1-2.RHEL4.i386.opt.rpm

How reproducible:
always

Steps to Reproduce:
1. create a fresh directoy with root suffix dc=local and ou=People,dc=local
2. import appended LDIF file
3. do a ldapsearch with -b "ou=calendar,ou=views,dc=local" "(uid=FUser)"
  
Actual results:
version: 1
dn: uid=FUser,ou=People, dc=local
uid: FUser
seeAlso: calendar
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: inetorgperson
givenName: First
sn: User
cn: First User

dn: ou=admins,ou=calendar,ou=views,dc=local
ou: admins
objectClass: top
objectClass: organizationalunit


Expected results:
Same as above, but without entry ou=admins

Additional info:

This occurs only for subtree searches, the one level search returns the correct
result set.

Created attachment 122801 [details]
Proposed fix

subtree view searches didn't use the client filter to limit the view subtree
portion of the match.

Patch checked in

Patch needs to be verified in next round of QE per process. Reopening this bug and marking it as 
MODIFIED.

 
Verified results with search:
"ou=calendar,ou=views,o=my.com" "(uid=FUser)"
ldapsearch: started Mon Nov 19 14:18:38 2007

ldap_init( legbreaker.usersys.redhat.com, 1111 )
filter pattern: (uid=FUser)
returning: ALL
filter is: (uid=FUser)
version: 1
dn: uid=FUser,ou=People, o=my.com
uid: FUser
seeAlso: calendar
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: inetorgperson
givenName: First
sn: User
cn: First User
1 matches

Verified aginst:
1195508960 redhat-ds-base-8.0.0-11.el5dsrv Mon Nov 19 2007 
1195508963 redhat-ds-admin-8.0.0-1.15.el5dsrv Mon Nov 19 2007 
1195508965 redhat-ds-console-8.0.0-8.el5dsrv Mon Nov 19 2007 
1195508966 redhat-admin-console-8.0.0-9.el5dsrv Mon Nov 19 2007