ando@sys-net.it writes:
The current specification is formalized in a comment in overlays/deref.c; I intend to improve it and post it at http://www.openldap.org/faq/data/cache/1469.html.
You've specified the syntax, but not the semantics. I don't see any mention there of what this control does, though I suppose the examples help if one knows what a GUID and a SID are.
BTW, possibly "deref(erence)" is a confusing name for the control, since it is apparently not related to aliases.