API error should probably be debug
Remove netmask
Formatting
Allow NULL user object filter

If the DN of the user object can be constructed from attributes in the request, there's no need to apply a filter, and scope = base can be used.
Should be T_INVALID not T_OP_INVALID
Rename map_from_str to map_from_fields
tok should be a bool
Add getop (get an operator)
Fixup map_from_str to work correctly with list qualifiers