The fix in ppolicy.c 1.81 works fine when applied to 2.3.24. I used this diff: http://www.openldap.org/devel/cvsweb.cgi/servers/slapd/overlays/ppolicy.c.diff?r1=1.79&r2=1.81&hideattic=1&sortbydate=0 Thanks!