(ITS#7820) slapo-constraint falsely allows add with count 1

Full_Name: Version: 2.4.39 OS: not relevant URL: Submission from: (NULL) (79.219.107.130)

Not sure whether this is a regression caused by the fix for ITS#7773.

Given this constraint:

constraint_attribute uid count 1 restrict="ldap:///ou=example??sub?(objectClass=account)"

One can still add two 'uid' values when sending an add request like this:

dn: uid=test1,ou=example changetype: add objectClass: account uid: test2 [..]

Generally I don't like this magic of accepting both attribute values from DN and entry. :-/