> After this error, the second server goes into refresh mode and gets a > fresh copy. It would appear that this error relates to the ppolicy > overlay as the entries in the access log at the time of error shows > the pwdFailureTime being removed during a password reset. I do see the > pwdFailureTime being set in the access log earlier too, so the data > should be there (even though the error code indicates no such > attribute).
I also wanted to add that this issue doesn't happen on every password failure only on a random occasion - so I can't replicate it.
