https://bugs.openldap.org/show_bug.cgi?id=9267
--- Comment #2 from Howard Chu hyc@openldap.org --- (In reply to Quanah Gibson-Mount from comment #1)
Actually, the case is a bit different.
It only works if you use the IP address for the client, i.e:
ldapsearch .. -ZZ -H ldap://127.0.0.1/
if you use the hostname, it fails correctly.
However, I think there's still a bug here in the former.
Not a bug. Works as designed. Closing this.