From 89b03a1c7ea28a9183c0d212bfe69450f4fe4182 Mon Sep 17 00:00:00 2001
From: Howard Chu <hyc@openldap.org>
Date: Tue, 21 Sep 2004 00:14:28 +0000
Subject: [PATCH] Make ppolicy_add consistent with ppolicy_modify - don't add
 pwdChangedTime opattr on replicated entries.

---
 servers/slapd/overlays/ppolicy.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/servers/slapd/overlays/ppolicy.c b/servers/slapd/overlays/ppolicy.c
index c0741354f1..e46cd1dcad 100644
--- a/servers/slapd/overlays/ppolicy.c
+++ b/servers/slapd/overlays/ppolicy.c
@@ -1223,7 +1223,7 @@ ppolicy_add(
 			}
 		}
 		/* If password aging is in effect, set the pwdChangedTime */
-		if ( pp.pwdMaxAge || pp.pwdMinAge ) {
+		if (( pp.pwdMaxAge || pp.pwdMinAge ) && !be_isupdate( op )) {
 			struct berval timestamp;
 			char timebuf[ LDAP_LUTIL_GENTIME_BUFSIZE ];
 			struct tm *ltm;
-- 
2.39.5