From f1ca58680ae5616348e75f2ba59891358ed39e51 Mon Sep 17 00:00:00 2001
From: Howard Chu <hyc@openldap.org>
Date: Thu, 27 Mar 2025 16:11:17 +0000
Subject: [PATCH] ITS#10299 slapacl: use dummy entry_get in dry-run mode

---
 servers/slapd/slapacl.c | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/servers/slapd/slapacl.c b/servers/slapd/slapacl.c
index 9c67e5e1c0..020c05d892 100644
--- a/servers/slapd/slapacl.c
+++ b/servers/slapd/slapacl.c
@@ -60,6 +60,18 @@ print_access(
 	return rc;
 }
 
+static int
+slapacl_entry_get(
+	Operation *op,
+	struct berval *dn,
+	ObjectClass *oc,
+	AttributeDescription *ad,
+	int rw,
+	Entry **e )
+{
+	return LDAP_UNWILLING_TO_PERFORM;
+}
+
 int
 slapacl( int argc, char **argv )
 {
@@ -293,6 +305,8 @@ slapacl( int argc, char **argv )
 				}
 			}
 		}
+	} else {
+		op->o_bd->be_fetch = slapacl_entry_get;
 	}
 
 	for ( ; argc--; argv++ ) {
-- 
2.47.3