FWIW, it appears I'm hitting this bug when using nss_ldap on Linux -- sshd coredumps in try_read1msg(). Jim