https://bugs.openldap.org/show_bug.cgi?id=10460
--- Comment #2 from Howard Chu hyc@openldap.org --- In cyrus.c it's in ldap_int_sasl_bind which is only called from ldap_sasl_interactive_bind. These would presumably only be used in clients, but it's called multiple places in slapd, including back-asyncmeta, back-ldap, and back-meta. Each of those callers should be providing all the required inputs such that no prompts are ever displayed, so the fprintf's should never actually get invoked. So does this need to be changed?