quanah@zimbra.com wrote:

I just found that if I run the server side using "-d -1" (i.e., /usr/sbin/slapd -d -1 -f /etc/ldap/slapd.conf) I never hit the lockup.

I don't know exactly what you both are testing. But when binding to MS AD with SASL (I've tested with DIGEST-MD5) one MUST use the FQDN during connect (command-line option -H), not the IP address. Maybe it's a similar issue?

Ciao, Michael.