Critical Description
When requesting the schema cn=schema and no ManageDsaIT control is present in the request, the server does not return the schema entry.
The reason is that the SearchHandler adds an OR'd filter (objectClass=referral) to the user's filter, however in the SchemaInterceptor this enhanced filter (|(objectClass=subschema)(objectClass=referral)) isn't handled.