https://bugs.openldap.org/show_bug.cgi?id=9863
--- Comment #1 from Quanah Gibson-Mount quanah@openldap.org --- Note that this means in a replicated environment, there's currently no way to configure the system to work correctly with ppolicy+lastbind. The slapo-lastbind overlay is not an option because it tracks a different attribute.