Password history enforcement not working in Carbonio CE

Hello 

I’m running the latest Carbonio CE on Ubuntu and have configured password history and mandatory change policies as follows:

Despite this, when the user is prompted to change their password (either on first login or via the web UI), they are still able to re-use the exact same password. It appears the history check is being bypassed.

Has anyone else encountered this issue or can suggest a workaround or fix? I’ve confirmed that the COS and account attributes are set correctly, but the policy doesn’t seem to be enforced. Any guidance would be greatly appreciated!