pwdChangedTime range query

hi all,

I am using some pwdChangedTime range queries to warn users about password expiration.

An example filter might be:

(&(pwdChangedTime<=20211019000000Z)(pwdChangedTime>=20211018000001Z)(pwdPolicySubentry=cn=default270g,ou=policies,ou=people,dc=example,dc=edu))

since in-place upgrade to OpenLDAP-2.6.2 these queries return no entries.

If I remove either comparison condition:

(&(pwdChangedTime>=20211018000001Z)(pwdPolicySubentry=cn=default270g,ou=policies,ou=people,dc=example,dc=edu))

(&(pwdChangedTime<=20211019000000Z)(pwdPolicySubentry=cn=default270g,ou=policies,ou=people,dc=example,dc=edu))

they both work.

Did I forget some re-index?

thank you in advance for your time,

Francesco