Running an slapindex -v was sufficient, very kind of you.
anyway, ubuntu runs slapd as root, that surprised me, on most systems
/var/lib/ldap is owned by ldap:ldap, but, we know the nasty things that ubuntu likes to do :)
Thanks for your time and support.