Hi All,<div><br></div><div>I am playing with access controls on openldap 2.4.26, I have a user with search access on everything</div><div><br></div><div><div>access to *</div><div>        by anonymous auth</div><div>        by dn=&quot;uid=102,ou=system,dc=example,dc=com&quot; search</div>
</div><div><br></div><div>And when I perform search I get nothing</div><div><br></div><div>ldapsearch -H &quot;ldap://testldap:389&quot; -D &quot;uid=102,ou=system,dc=example,dc=com&quot; -b &quot;ou=users,dc=example,dc=com&quot; -x -W &#39;(uid=1)&#39; mail cn dn</div>
<div><br></div><div><div>Enter LDAP Password: </div><div># extended LDIF</div><div>#</div><div># LDAPv3</div><div># base &lt;ou=users,dc=example,dc=com&gt; with scope subtree</div><div># filter: (uid=1)</div><div># requesting: mail cn dn </div>
<div>#</div><div><br></div><div># search result</div><div>search: 2</div><div>result: 0 Success</div><div><br></div><div># numResponses: 1</div></div><div><br></div><div>so I get a success but no value, is it a valid response? I want to control access so that the &quot;uid=102&quot; user can do lookup from given attributes but can not do (objectClass=*) to get a list of every entry in the ldap.</div>
<div><br></div><div>Thanks for the help</div>