r21315: ldb now supports filters like (&(dn=%s)(&(objectClass=kerberosSecret)(private...