If no ACL lines are included in slapd.conf, what is the default behavior of slapd?

By default, when no explicit `access` directives are present in the `slapd.conf` file or dynamic configuration, OpenLDAP adopts a permissive policy. This default allows both authenticated and anonymous users to read all entries and their attributes within the directory, ensuring basic directory discoverability unless specifically restricted.

The default behavior is permissive (allow read), not restrictive (deny read).

While `userPassword` is often protected, the default policy without ACLs permits read access to all entries, not just selective protection.

Access is generally allowed from the network by default, not restricted solely to the local machine.