Now works fine against base ldapd when binding anonymous, after a nice debugging session with upstream.