list because checking is performed on these, rather than the entry.

slap_mods_free() now takes an extra argument indicating whether to
free the values or not.

(actually, in 2.2 the target DN was not even prettied, but this
will do)

to preserve 2.2 SLAPI behaviour; see comments for further info)

global SLAPI plugins) have access to op->ora_e.

Note that slap_mods2entry() is still called in fe_op_add() in order to
add any operational attributes.

were confused about realloced memory.

investigating

a fresh copy of everything.

Since this authz stuff is no longer specific to SASL it probably should
be moved into its own chapter. Not going to bother right now.