LDAP rfcs define two special operators in the attribute list. These are * and +. * is "all attributes" and + is "all operational attributes". Samba 4.8.0 shows that both * and + are unsupported, and when used in a query result in an empty attribute result set. These should be added to s4 as they are an expected (and useful!) tool for administrators.