Only happens if OpenLDAP is not secured by Kerberos or SSL... I don't see this as very common in the first place (ie, cleartext over the wire for auth?!).