Hi Team, 

Requirements: I want to create user and provide only access to contextCSN. 

I have tried to create user and gave privilege as below.

access to dn.base="dc=domain,dc=com" attrs=entry,children,contextcsn by dn.exact="uid=replmonitor,dc=domain,dc=com" read by * none

But it results as 

ldapsearch -x -H ldaps:// -D "uid=replmonitor,dc=domain,dc=com" -W -b "dc=domain,dc=com" Enter LDAP Password: search: 2 result: 32 No such object


Please someone help me with the acl for the new user where it can list the contextCSN 

Regards
K.Keerthiga