https://bugs.openldap.org/show_bug.cgi?id=10299
--- Comment #4 from Howard Chu hyc@openldap.org --- (In reply to Greg from comment #3)
This is just a note explaining my thinking, don't take it as advocacy.
In man 8 slapacl, -u and -b 'point at each other', and -u saying "a fake entry with the DN given with the -b option is used" had me to where my interpretation was that -u is scope-limited just to the DN specified in -b. That you then indicated the -rest- of the ACLs aren't looked up, that surprised me.
I don't understand any of your comment at all, but clearly the SEGV is because you have an ACL that references a group and the group entry couldn't be retrieved from the DB because in dryrun mode none of the DBs are opened. If you want this slapacl invocation to work, don't use dryrun mode.