From 02eb0b6fe845e7eecf3f8d3e4e5c91e684cd06bf Mon Sep 17 00:00:00 2001
From: Howard Chu <hyc@openldap.org>
Date: Tue, 4 Feb 2020 16:35:56 +0000
Subject: [PATCH] ITS#9121 fix filtering of dyngroups with memberof

---
 servers/slapd/overlays/dynlist.c | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/servers/slapd/overlays/dynlist.c b/servers/slapd/overlays/dynlist.c
index 6c9f9afca0..613b568b51 100644
--- a/servers/slapd/overlays/dynlist.c
+++ b/servers/slapd/overlays/dynlist.c
@@ -964,6 +964,10 @@ dynlist_search2resp( Operation *op, SlapReply *rs )
 		if ( dyn ) {
 			dyn->dy_seen = 1;
 			rc = dynlist_prepare_entry( op, rs, dyn->dy_dli );
+			if ( ds->ds_origfilter && test_filter( op, rs->sr_entry, ds->ds_origfilter ) != LDAP_COMPARE_TRUE ) {
+				rs_flush_entry( op, rs, NULL );
+				rc = LDAP_SUCCESS;
+			}
 			return rc;
 		} else {
 			TAvlnode *ptr;