From ed356c55d962bed90c673bff69cb524c14799a46 Mon Sep 17 00:00:00 2001
From: Howard Chu <hyc@openldap.org>
Date: Thu, 3 Sep 2020 21:30:35 +0100
Subject: [PATCH] ITS#9334 slapo-ppolicy re-fix ITS#9302

The mutex_lock was being skipped in the lockout case,
but still calling mutex_unlock at the end.
---
 servers/slapd/overlays/ppolicy.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/servers/slapd/overlays/ppolicy.c b/servers/slapd/overlays/ppolicy.c
index 26198ae958..f1243658e9 100644
--- a/servers/slapd/overlays/ppolicy.c
+++ b/servers/slapd/overlays/ppolicy.c
@@ -1414,12 +1414,12 @@ ppolicy_bind_response( Operation *op, SlapReply *rs )
 	LDAPControl *ctrl = NULL;
 	Entry *e;
 
+	ldap_pvt_thread_mutex_lock( &pi->pwdFailureTime_mutex );
 	/* If we already know it's locked, just get on with it */
 	if ( ppb->pErr != PP_noError ) {
 		goto locked;
 	}
 
-	ldap_pvt_thread_mutex_lock( &pi->pwdFailureTime_mutex );
 	op->o_bd->bd_info = (BackendInfo *)on->on_info;
 	rc = be_entry_get_rw( op, &op->o_req_ndn, NULL, NULL, 0, &e );
 	op->o_bd->bd_info = bi;