diff --git a/tests/data/slapd-acl.conf b/tests/data/slapd-acl.conf
index a066f06286..9c58c0cd27 100644
--- a/tests/data/slapd-acl.conf
+++ b/tests/data/slapd-acl.conf
@@ -43,7 +43,7 @@ access to dn.base="" by * read
 access		to attr=objectclass
 		by * =rsc stop
 
-access		to filter="(objectclass=person)" attr=userpassword
+access		to filter="(objectclass=person)" attr=userpassword dn.subtree=""
 		by anonymous auth
 		by self write