openldap (2.4.23-5) unstable; urgency=high
[...]
* debian/slapd.scripts-common, debian/slapd.postinst: on upgrade from
versions <= 2.4.23-4, explicitly grant access to cn=Subschema, which
otherwise is blocked by our added olcAccess settings. Closes: #596326.
* Likewise, grant access to dn.exact="" so that base dn autodiscovery
works as intended. Closes: #596049.
Fixed in natty and later, looks like.
openldap (2.4.23-5) unstable; urgency=high slapd.scripts- common, debian/ slapd.postinst: on upgrade from
[...]
* debian/
versions <= 2.4.23-4, explicitly grant access to cn=Subschema, which
otherwise is blocked by our added olcAccess settings. Closes: #596326.
* Likewise, grant access to dn.exact="" so that base dn autodiscovery
works as intended. Closes: #596049.