But just for the records...
Finally I managed to reproduce this with OpenLDAP's ldapsearch command-line tool. The bound entity needs read access to cn=monitor.
Try this more than one time:
ldapsearch -x -H ldapi://%2Ftmp%2Fopenldap-socket -b "cn=monitor" -z 10 -s one "(objectClass=*)" cn objectclass
Do this as many times as you have threads configured and slapd becomes completely unresponsive and has to be stopped by kill -9.
This was tested on my local install under openSUSE 11.4 but also on an installation running on HP-UX (64 bit build). Both running 2.4.26.
Ciao, Michael.