https://bugs.openldap.org/show_bug.cgi?id=9863
--- Comment #2 from Quanah Gibson-Mount quanah@openldap.org --- A couple of other things to check on:
a) In a delta-syncrepl environment, what happens if an account has first bound to a consumer (causing pwdLastSuccess to populate there) followed by a bind to the provider (causing pwdLastSuccess to populate and replicate). This could cause a collision and REFRESH. Subsequent BIND ops to the provider should result in a mod/replace. Real question is if the first time is a mod/add.
b) What happens in a race condition situation (similar to a, but assuming chaining was actually functional).