were modified. Also use tmpmem for the constructed filter.

as error is local (e.g., not a protocol result code).

works with "restrict all": in principle, this slapd should be started without any listener, if possible...