This patch does appear to cause slapd to misbehave for reasons I have not yet determined... One note is that Cyrus SASL 2 returns a static constant string ("") for zero length responses. But as OpenLDAP doesn't try to free the response data for Cyrus SASL 2 it seems unlikely that this is the problem. -- Luke