Given the ppolicy change backport for everything else was straight forward for every other command, and committed, seems reasonable to keep it. Ando and/or I likely can do a quick backport for ldapmodify.c. -- Kurt