Hi,

I'm making a follow up from this thread http://www.openldap.org/lists/openldap-bugs/201512/msg00003.html

And more generally about overlay together with schema update, especially when running in OLC mode.

You need to replace your ppolicy.schema/ppolicy.ldif from 2.4.42 with the one bundled in 2.4.43.

When running in OLC mode, first note that this is not as straight-forward as replacing a file on a filesystem : you have to use ldapxxx commands to update the schema.

Second, having a downtime when upgrading a "maintenance" release (as 2.4.42 > 2.4.43) doesn't seem appropriate to me and this use case can definitively lead to. Once you realise that slapd isn't going to start you are forced to update slapd.d ppolicy schema by hand.

What do you think ? Is there anything planned to enhance this kind of situation ?