opendj-server-legacy/src/main/java/org/opends/server/api/AuthenticationPolicy.java
@@ -144,7 +144,7 @@ // search for the nearest applicable sub-entry. List<SubEntry> pwpSubEntries = DirectoryServer.getSubentryManager() .getSubentries(userEntry); if ((pwpSubEntries != null) && (!pwpSubEntries.isEmpty())) if (pwpSubEntries != null && !pwpSubEntries.isEmpty()) { for (SubEntry subentry : pwpSubEntries) {