ITS#5569 ignore internal ops when validating pwd modify

diff --git a/servers/slapd/overlays/ppolicy.c b/servers/slapd/overlays/ppolicy.c
index 8fc7b33b13a94e2f0e4e8a9a888b7f8f01013c6b..160358a9646aadcab27b864f6059c584e38ef088 100644 (file)
--- a/servers/slapd/overlays/ppolicy.c
+++ b/servers/slapd/overlays/ppolicy.c
@@ -1581,7 +1581,7 @@ ppolicy_modify( Operation *op, SlapReply *rs )
                                }
                        }
 
-               } else if ( !is_at_operational( ml->sml_desc->ad_type ) ) {
+               } else if ( !(ml->sml_flags & SLAP_MOD_INTERNAL) && !is_at_operational( ml->sml_desc->ad_type ) ) {
                        mod_pw_only = 0;
                        /* modifying something other than password */
                }