Make ppolicy_add consistent with ppolicy_modify - don't add pwdChangedTime

opattr on replicated entries.

diff --git a/servers/slapd/overlays/ppolicy.c b/servers/slapd/overlays/ppolicy.c
index c0741354f1d68fc586e40d327748ad28d16a06d4..e46cd1dcade8d7b5fe8204fb79704b27cb171f31 100644 (file)
--- a/servers/slapd/overlays/ppolicy.c
+++ b/servers/slapd/overlays/ppolicy.c
@@ -1223,7 +1223,7 @@ ppolicy_add(
                        }
                }
                /* If password aging is in effect, set the pwdChangedTime */
-               if ( pp.pwdMaxAge || pp.pwdMinAge ) {
+               if (( pp.pwdMaxAge || pp.pwdMinAge ) && !be_isupdate( op )) {
                        struct berval timestamp;
                        char timebuf[ LDAP_LUTIL_GENTIME_BUFSIZE ];
                        struct tm *ltm;