https://bugs.openldap.org/show_bug.cgi?id=9309
--- Comment #4 from Howard Chu hyc@openldap.org --- (In reply to Ondřej Kuzník from comment #3)
Thank you for the feedback. This is a bug only when multiple ppolicy modules are attached, not sure how easy this one will be to fix.
AFAIK there should be no reason to configure ppolicy multiple times (especially while we only support userPassword as the password attribute), but we don't currently have a way to check that either.
Not true. Just set SLAPO_BFLAG_SINGLE in the overlay bi_flags to prevent this.