https://bugs.openldap.org/show_bug.cgi?id=9302
--- Comment #1 from requate@univention.de requate@univention.de --- Created attachment 748 --> https://bugs.openldap.org/attachment.cgi?id=748&action=edit 0001-ITS-9302-ppolicy-avoid-pwdFailureTime-race-condition.patch
This patch worked for me.