ITS#5569

diff --git a/CHANGES b/CHANGES
index 5835a6eefa5415bb901efdf5cec92d39712c4c0a..3417bff9f8a92d343948ec08897f11609bd6df26 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -4,6 +4,7 @@ OpenLDAP 2.3.43 Engineering
        Fixed liblber ber_get_next length decoding (ITS#5580)
        Fixed slapd replog timestamps (ITS#5532)
        Fixed slapd socket assert (ITS#5489)
+       Fixed slapo-ppolicy modify with internal ops (ITS#5569)
        Fixed slapo-syncprov psearch on closed connection (ITS#5401, ITS#5565)
 
 OpenLDAP 2.3.42 Release (2008/05/28)

diff --git a/servers/slapd/overlays/ppolicy.c b/servers/slapd/overlays/ppolicy.c
index 00b815b4f14f1bf1639610eb71a90e5df95915a1..506fe71a96803b4dd1f9ea1641655cb28fe64c95 100644 (file)
--- a/servers/slapd/overlays/ppolicy.c
+++ b/servers/slapd/overlays/ppolicy.c
@@ -1573,7 +1573,7 @@ ppolicy_modify( Operation *op, SlapReply *rs )
                                }
                        }
 
-               } else if ( !is_at_operational( ml->sml_desc->ad_type ) ) {
+               } else if ( !(ml->sml_flags & SLAP_MOD_INTERNAL) && !is_at_operational( ml->sml_desc->ad_type ) ) {
                        mod_pw_only = 0;
                        /* modifying something other than password */
                }