[nssldap] nss_ldap - filter for nss_base_passwd not functional

[subu <subu.ayyagari [at] gs.com>]

Using nss_ldap, but it does not seem to look at attributes.
Below is a case where users with allowatrib=admin or dev are allowed.
But getent passwd shows *all* the records in LDAP.

Is there an additional step to  enforce restrictions specified by filter?

Eg:
nss_base_passwd 
ou=People,dc=gs,dc=com?one|(allowattrib=admin)(allowatrib=dev)

getent passwd ( dumps entire directory though )

Pl. advise,

thanks
subu.ayyagari@gs.com