https://bugs.openldap.org/show_bug.cgi?id=10174
--- Comment #1 from Howard Chu hyc@openldap.org --- Your analysis sounds plausible, but not sure what you expect us to do about ActiveDirectory violating the LDAP protocol specifications. This sounds like a bug report for Microsoft.