https://bugs.openldap.org/show_bug.cgi?id=7766

--- Comment #10 from Ondřej Kuzník ondra@mistotebe.net --- syncrepl_diff_entry() doesn't work if either entry has extra attributes at the end, which are ignored when we stop once the "while ( old && new )" check fails. Those do not make it into the diff.

In the above case, some operational attributes are modified (at least entryCSN will) so they're moved to the end so the ppolicy parameters are picked up the second time.