From: Ondřej Kuzník <ondra@mistotebe.net>
Date: Thu, 31 Jul 2025 18:30:00 +0000 (+0100)
Subject: ITS#10379 Use a fresh timestamp for lastbind mod
X-Git-Url: http://git.ipfire.org/gitweb/gitweb.cgi?a=commitdiff_plain;h=refs%2Fmerge-requests%2F783%2Fhead;p=thirdparty%2Fopenldap.git

ITS#10379 Use a fresh timestamp for lastbind mod
---

diff --git a/servers/slapd/bind.c b/servers/slapd/bind.c
index ec0709d70e..51e342312b 100644
--- a/servers/slapd/bind.c
+++ b/servers/slapd/bind.c
@@ -476,6 +476,13 @@ fe_op_lastbind( Operation *op )
 	op2.o_dn = op->o_bd->be_rootdn;
 	op2.o_ndn = op->o_bd->be_rootndn;
 
+	/*
+	 * Other bind response logic (e.g. ppolicy) could have triggered a write
+	 * with this operation - use a fresh timestamp.
+	 */
+	slap_op_time( &op2.o_time, &op2.o_tincr );
+	BER_BVZERO( &op2.o_csn );
+
 	/*
 	 * Code for forwarding of updates adapted from ppolicy.c of slapo-ppolicy
 	 *