Simone Taliercio wrote:
> access to *
>         by self write
>         by anonymous auth
>         by users search
>
> The only way to workaround that issue is removing any ACL or leaving "by users
> read".

Looking at the ACL above you likely run into a misunderstanding.

You should carefully read slapd.access(5). Especially the very important
section "THE ACCESS DIRECTIVE" describes significance of order of <what> and
<who> clauses and that the checking stops at the first matching <what> and
<who> clause (if control flow is not explicitly redirected).

Given the example above you might rather want this:

access to *
        by self write
        by users search
        by * auth

YMMV.

Also it's very handy to run slapd -d stats,acl [..other params..] to get ACL
debugging displayed on console.

Ciao, Michael.