The issue you see is related to control criticality: if the control is marked as non-critical in the request, it works as intended. In fact, back-relay can only expose the underlying database's controls support, but this currently fails because of the way supported controls are exposed. Please file an ITS.
p.
Ing. Pierangelo Masarati OpenLDAP Core Team
SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it ----------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Fax: +39 0382 476497 Email: ando@sys-net.it -----------------------------------