NS_LDAP_READ_SHADOW
flags & NS_LDAP_READ_SHADOW);
cookie->i_flags |= NS_LDAP_READ_SHADOW;
if (flags & NS_LDAP_READ_SHADOW)