You need to add (before "olcAccess: {3}") something that allows search
access to any valid search base. OpenLDAP 2.4 requires search access to
the entry pseudo-attribute of the search base.
Something like
olcAccess: {3}to dn.subtree="dc=example,dc=com" attrs=entry by * read
p.
