Ravi Althuru wrote:
But my question is that the scenario I described, works in my Opebdlap 2.3 instance and comparing between the two did not yield any differences.
Behaviour of ACL processing was changed from 2.3 to 2.4 and pseudo-attribute 'entry' and 'children' were introduced. Read about access control in man page slapd.access(5).
Not sure whether that's relevant in your case.
No, I won't debug your ACLs.
Ciao, Michael.