https://bugs.openldap.org/show_bug.cgi?id=9279
--- Comment #10 from Michael Ströder michael@stroeder.com --- (In reply to Michael Ströder from comment #3)
But it seems to fail with wrong response OID for password expiration warning: [..] AssertionError: <ldap0.controls.pwdpolicy.PasswordExpiredControl object at 0x7f7ea8946a00> is not an instance of <class 'ldap0.controls.pwdpolicy.PasswordExpiringControl'>
This bug is still not fixed.