The ds_search( ) call requires the subset input parameter. The subset parameter specifies the portion of the DIT to be searched. It takes the value of one of the following symbolic constants, which are defined in the xds.h header file:
· DS_BASE_OBJECT, meaning to search just the given object entry
· DS_ONE_LEVEL, meaning to search just the immediate subordinates of the given object entry
· DS_WHOLE_SUBTREE, meaning to search the given object and all its subordinates
The subset parameter in acl.c takes the value DS_WHOLE_SUBTREE.