Hello,
ITS #5400 outlines a change in the privileges required by search operations in 2.4. I would like to suggest documentation for this in the admin guide (the slapd.access man page is already accurate).
Please find propositions here:
Explanation and example in the "Upgrading from 2.3" appendix.
Detail of the required privileges on the "entry" pseudo-attribute in the access control section (static and dynamic config - same text is repeated twice).
As a side note, I encountered a "452 Error writing file: No space left on device." error on ftp.openldap.org/incoming while trying to upload these patches.
Thanks for this. I was hoping to do this tomorrow as I've been so busy this week, but now I don't need to!
Will patch, review and provide feedback as soon as I can.
Gavin.