OpenLDAP Consumer has problem with ACL
I've setup the OpenLDAP Slave with syncing with the Master. Followings are my observation of the newly created Slave node,
1. I can able to successfully able to create a connection in Apache Directory Studio. 2. But i don't see the Root DSE, So then i checked the slapd logs and then found out the following from the logs
​
646035bb conn=1007 op=1 SRCH base="ou=special,ou=users,dc=asd,dc=com" scope=2 deref=0 filter="(objectClass=posixGroup)" 646035bb ==> limits_get: conn=1007 op=1 self="uid=ldap-slave,ou=special,ou=users,dc=asd,dc=com" this="ou=special,ou=users,dc=asd,dc=com"
646035bb => hdb_search 646035bb bdb_dn2entry("ou=special,ou=users,dc=asd,dc=com") 646035bb => access_allowed: search access to "ou=special,ou=users,dc=asd,dc=com" "entry" requested 646035bb => acl_get: [5] attr entry 646035bb => acl_mask: access to entry "ou=special,ou=users,dc=asd,dc=com", attr "entry" requested 646035bb => acl_mask: to all values by "uid=ldap-slave,ou=special,ou=users,dc=asd,dc=com", (=0) 646035bb <= check a_dn_pat: self 646035bb <= check a_dn_pat: cn=admin,dc=asd,dc=com 646035bb <= check a_dn_pat: * 646035bb <= acl_mask: [3] applying none(=0) (stop) 646035bb <= acl_mask: [3] mask: none(=0) 646035bb => slap_access_allowed: search access denied by none(=0) 646035bb => access_allowed: no more rules 646035bb send_ldap_result: conn=1007 op=1 p=3 646035bb send_ldap_result: err=32 matched="" text="" 646035bb send_ldap_response: msgid=2 tag=101 err=32
But i has only the following ACLs defined in the configurations,
olcAccess: {0}to attrs=userPassword,shadowLastChange by self write by dn="cn
=admin,dc=asd,dc=com" write by anonymous auth by \* none olcAccess: {1}to \* by self write by dn="cn=admin,dc=asd,dc=com" write by \* none
So any thought about this behavior ?