A more complete fix is here:
ftp://ftp.openldap.org/incoming/pierangelo-masarati-2010-02-24-dontusecopy-otp.patch
It allows to configure what SASL auxprop names need the "dontUseCopy" approach. The "cmusaslsecretOTP" is set by default, if known through the schema.
Please test. p.