(ITS#5513) back-ldap+ppolicy bind assertion failure

[mbackes@symas.com]

Full_Name: Matthew Backes
Version: 2.3, 2.4
OS: linux
URL: 
Submission from: (NULL) (76.88.99.93)


A basic back-ldap configuration with the password policy overlay stacked on top
results in an assertfail for the second bind.  e.g.  given a working (possibly
empty db) on ldap://localhost:1389/...

include ...../core.schema
include ...../ppolicy.schema

modulepath .....
moduleload back_ldap.la
moduleload ppolicy.la

database ldap
suffix ""
uri ldap://localhost:1389/

After performing a successful remote bind, the next bind attempt halts the
back-ldap directory with:

slapd: bind.c:905: ldap_back_getconn: Assertion `( li->li_idassert.si_flags &
(0x02U) )' failed.

where 0x02U here is LDAP_BACK_AUTH_OVERRIDE.

This happens under both OpenLDAP 2.3 and 2.4.