This is not a new problem. I am pretty sure I filed a bug report about this years ago when I worked at Stanford, but I could not find it.
I've filed <https://github.com/cyrusimap/cyrus-sasl/issues/494> --Quanah -- Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: <http://www.symas.com>