"11.3.3.1. Notes on Proxy Authorization Rules" http://www.openldap.org/doc/admin23/sasl.html#SASL%20Proxy%20Authorization notes the following example:
authzTo: uid=[^,]*,dc=example,dc=com
Shouldn't that be:
authzTo: dn.regex:uid=[^,]*,dc=example,dc=com
p@rick