Make sure attributes from ldapsearch are passed into the environment. Make sure the distinguished name is duplicated before being used.
httpd/httpd/trunk/modules/aaa/mod_authnz_ldap.c