~/.ldaprc für root:

~/.ldaprc

URI       ldapi:///
BASE      cn=config
SASL_MECH EXTERNAL

ldapsearch -LLL dn

ldapsearch -b cn=schema,cn=config -LLL dn

ldapsearch -LLL '(olcSuffix=*)' olcSuffix

ldapsearch -b 'olcDatabase={1}mdb,cn=config' -LLL

ldapsearch -LL -b olcDatabase={1}mdb,cn=config olcAccess

olcAccess.ldif

dn: olcDatabase={1}mdb,cn=config
changetype: modify
replace: olcAccess
olcAccess: {0}to attrs=userPassword 
  by self write 
  by dn="cn=admin,dc=example,dc=org" write 
  by anonymous auth 
  by * none
olcAccess: {1}to attrs=shadowLastChange 
  by self write 
  by dn="cn=admin,dc=example,dc=org" write 
  by * read
olcAccess: {2}to * 
  by dn="cn=admin,dc=example,dc=org" write 
  by * read

ldapmodify -f olcAccess.ldif

ldapvi -Y EXTERNAL -b 'olcDatabase={1}mdb,cn=config'