diff --git a/src/clients/ldap_browser.rb b/src/clients/ldap_browser.rb
index 4e98f5a..0102804 100644
--- a/src/clients/ldap_browser.rb
+++ b/src/clients/ldap_browser.rb
@@ -203,7 +203,7 @@ def main
               )
             ) do |c|
               @i = Ops.add(@i, 1)
-              @i == @conf ? @configuration : c
+              @i == @conf ? deep_copy(@configuration) : deep_copy(c)
             end
           end
         end
diff --git a/src/modules/Ldap.rb b/src/modules/Ldap.rb
index 106d36e..c0a08ef 100644
--- a/src/modules/Ldap.rb
+++ b/src/modules/Ldap.rb
@@ -3236,7 +3236,9 @@ def Write(abort)
     def WriteNow
       abort = lambda { false }
 
-      needed_packages = @sssd ? @sssd_packages : @pam_nss_packages
+      needed_packages = @sssd ?
+        deep_copy(@sssd_packages) :
+        deep_copy(@pam_nss_packages)
       if @sssd_with_krb
         needed_packages = Convert.convert(
           Builtins.union(needed_packages, @kerberos_packages),
diff --git a/src/modules/LdapPopup.rb b/src/modules/LdapPopup.rb
index 6d85220..201c18d 100644
--- a/src/modules/LdapPopup.rb
+++ b/src/modules/LdapPopup.rb
@@ -222,7 +222,7 @@ def BrowseTree(root_dn)
     def InitAndBrowseTree(root_dn, connection)
       connection = deep_copy(connection)
       args = Ops.greater_than(Builtins.size(connection), 0) ?
-        connection :
+        deep_copy(connection) :
         {
           "hostname"   => Ldap.GetFirstServer(Ldap.server),
           "port"       => Ldap.GetFirstPort(Ldap.server),