A more complete fix is here:
<
ftp://ftp.openldap.org/incoming/pierangelo-masarati-2010-02-24-dontusecop...
It allows to configure what SASL auxprop names need the "dontUseCopy"
approach. The "cmusaslsecretOTP" is set by default, if known through the
schema.
Please test. p.