(ITS#7820) slapo-constraint falsely allows add with count 1

[michael@stroeder.com]

Full_Name: 
Version: 2.4.39
OS: not relevant
URL: 
Submission from: (NULL) (79.219.107.130)


Not sure whether this is a regression caused by the fix for ITS#7773.

Given this constraint:

constraint_attribute
  uid
  count 1
  restrict="ldap:///ou=example??sub?(objectClass=account)"

One can still add two 'uid' values when sending an add request like this:

dn: uid=test1,ou=example
changetype: add
objectClass: account
uid: test2
[..]

Generally I don't like this magic of accepting both attribute values from DN and
entry. :-/