ITS#7089 Skip lockout checks/modifications if password attribute missing

diff --git a/servers/slapd/overlays/ppolicy.c b/servers/slapd/overlays/ppolicy.c
index 4d83078729c7a55d08f6aac42dc02a47714c5b35..dedfb1a5b0ad7f1f0b3844655a17a8cdaf87c619 100644 (file)
--- a/servers/slapd/overlays/ppolicy.c
+++ b/servers/slapd/overlays/ppolicy.c
@@ -1292,6 +1292,11 @@ ppolicy_bind_response( Operation *op, SlapReply *rs )
                return SLAP_CB_CONTINUE;
        }
 
+       /* ITS#7089 Skip lockout checks/modifications if password attribute missing */
+       if ( attr_find( e->e_attrs, ppb->pp.ad ) == NULL ) {
+               goto done;
+       }
+
        ldap_pvt_gettime(&now_tm); /* stored for later consideration */
        lutil_tm2time(&now_tm, &now_usec);
        now = now_usec.tt_sec;