I have reproduced the problem on 2.4.27. The mentioned ldapsearch query seems to have a high probability of success if run immediately after server start, which also seems true on 2.4.28.

I threw in an extra Debug() line and op->op_protocol == 2 at the check.

I'm rebuilding with as many debugging symbols enabled as possible to try to figure out what's going on.