In the LDAP Server Security Settings section there is a section with attribute=userpassword and attrs=userpassword. This is at best confusing to the reader and goes againest similiar examples shown in upstream documentation with regards to creating ACL's. All upstream docs seem to indicate that attr= is the favored usage, I can't seem to find where they depricated the attribute= acl type but it was made effective in the 2.2 tree. Reproducible: Always Steps to Reproduce: 1. 2. 3. This: access to attribute="userPassword" by dn="uid=root,ou=people,dc=genfic,dc=com" write .... Should likely be: access to attr="userPassword" ....
http://www.openldap.org/doc/admin22/slapdconfig.html#Access%20Control indeed shows that ACLs should use the attrs= syntax. Will fix...
Fixed in CVS. Thanks for reporting!