From: Quanah Gibson-Mount <quanah@openldap.org>
Date: Thu, 10 Jul 2008 02:55:07 +0000 (+0000)
Subject: ITS#5569
X-Git-Tag: OPENLDAP_REL_ENG_2_4_11~9
X-Git-Url: https://git.sur5r.net/?a=commitdiff_plain;h=ca21cdcaf7583dfd5f5c07e4ecfaa8b2e94a931c;p=openldap

ITS#5569
---

diff --git a/CHANGES b/CHANGES
index 9b98c825f4..a316d287b9 100644
--- a/CHANGES
+++ b/CHANGES
@@ -25,6 +25,7 @@ OpenLDAP 2.4.11 Engineering
 	Added slapo-nssov contrib module
 	Fixed slapo-pcache handling of negative search caches (ITS#5546)
 	Fixed slapo-ppolicy DNs with whitespaces (ITS#5552)
+	Fixed slapo-ppolicy modify with internal ops (ITS#5569)
 	Fixed slapo-syncprov ACL evaluation (ITS#5548)
 	Fixed slapo-syncprov crash with delcsn (ITS#5589)
 	Fixed slapo-syncprov full reload (ITS#5564)
diff --git a/servers/slapd/overlays/ppolicy.c b/servers/slapd/overlays/ppolicy.c
index 8fc7b33b13..160358a964 100644
--- a/servers/slapd/overlays/ppolicy.c
+++ b/servers/slapd/overlays/ppolicy.c
@@ -1581,7 +1581,7 @@ ppolicy_modify( Operation *op, SlapReply *rs )
 				}
 			}
 
-		} else if ( !is_at_operational( ml->sml_desc->ad_type ) ) {
+		} else if ( !(ml->sml_flags & SLAP_MOD_INTERNAL) && !is_at_operational( ml->sml_desc->ad_type ) ) {
 			mod_pw_only = 0;
 			/* modifying something other than password */
 		}