From: Quanah Gibson-Mount <quanah@openldap.org>
Date: Sat, 12 Jul 2008 01:52:19 +0000 (+0000)
Subject: ITS#5569
X-Git-Tag: OPENLDAP_REL_ENG_2_3_43~2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=7b7d6baf7b730cc095cb96a3c83ee34409ca4624;p=thirdparty%2Fopenldap.git

ITS#5569
---

diff --git a/CHANGES b/CHANGES
index 5835a6eefa..3417bff9f8 100644
--- a/CHANGES
+++ b/CHANGES
@@ -4,6 +4,7 @@ OpenLDAP 2.3.43 Engineering
 	Fixed liblber ber_get_next length decoding (ITS#5580)
 	Fixed slapd replog timestamps (ITS#5532)
 	Fixed slapd socket assert (ITS#5489)
+	Fixed slapo-ppolicy modify with internal ops (ITS#5569)
 	Fixed slapo-syncprov psearch on closed connection (ITS#5401, ITS#5565)
 
 OpenLDAP 2.3.42 Release (2008/05/28)
diff --git a/servers/slapd/overlays/ppolicy.c b/servers/slapd/overlays/ppolicy.c
index 00b815b4f1..506fe71a96 100644
--- a/servers/slapd/overlays/ppolicy.c
+++ b/servers/slapd/overlays/ppolicy.c
@@ -1573,7 +1573,7 @@ ppolicy_modify( Operation *op, SlapReply *rs )
 				}
 			}
 
-		} else if ( !is_at_operational( ml->sml_desc->ad_type ) ) {
+		} else if ( !(ml->sml_flags & SLAP_MOD_INTERNAL) && !is_at_operational( ml->sml_desc->ad_type ) ) {
 			mod_pw_only = 0;
 			/* modifying something other than password */
 		}