If no ACL lines are included in slapd.conf, what is the default behavior of slapd?

By default, if no access control lists are configured in `slapd.conf`, OpenLDAP's `slapd` server implicitly grants anonymous and authenticated users read access to all entries and attributes within the directory. This open policy ensures basic functionality unless restricted.

Denying all access is a restrictive policy that would require explicit configuration, not the default for an unconfigured server.

While `userPassword` is often protected, a complete lack of ACLs means no attributes are specifically protected by default; instead, all are generally accessible.

Limiting access to the local machine is a security measure that needs explicit configuration, it is not the default behavior.