> Are you able to reproduce this bug on latest jessie > (2:4.2.14+dfsg-0+deb8u11) or latest stretch (2:4.5.16+dfsg-1)? This > would be good if you tested it on latest buster (2:4.9.4+dfsg-3, -2 is ok). Ahem, no, sorry. I've switched all the infrastructure to AD (using debian/samba! ;-), so no more openldap here...