Howard Chu authored Aug 18, 2020 and Quanah Gibson-Mount committed Aug 18, 2020

Ignore if it's defined already. Make it no-user-mod.

Don't try to generate it if it wasn't requested

Fix for groupURI with no filter

Replace (memberOf=<groupDN>) filter with expansion of group's URI

parse dyngroup URLs in advance, don't use the ACL engine's
evaluator any more

Keep track of number of uses of memberOf in config, to
allow bypassing code if not in use.

Filters use parentheses, not brackets.

Only flush entry if dynlist_prepare_entry altered it

Must disable ACL group caching when checking membership

Delete unused code, add comments

1) allow filtering on dynamic attribute values
2) populate an optionally configured memberOf attribute

test044 script still needs to be extended to test these
enhancements. We need to define an interim attributeType
for testing memberOf functionality.

Caller provides and reuses a SlapReply it does not read after
initialization.  So reinitialize or move the declaration inwards.
In case of refint, move the rs parameter into refint_repair().