https://bugs.openldap.org/show_bug.cgi?id=9972
--- Comment #6 from dpa-openldap@aegee.org dpa-openldap@aegee.org --- This can be run as rootles podman (no root privileges required). The query
ldapsearch -xH ldap://127.0.0.0:3890 -b "dc=aegee,dc=org" -s sub
that is the same, but without -E sss=ou:2.5.13.15, does not return
# search result search: 2 result: 50 Insufficient access
That is: adding -E sss introduces Insufficient access error, but there are no errors if the same results are obtained without Server-side sort.