slapd breaks NSS, NSS breaks slapd

[manu@netbsd.org (Emmanuel Dreyfus)]

Hello

I have a machine where slapd will not start if ldap://localhost is
listed in /etc/nss_ldap.conf. It just hangs:

# slapd -u slapd -h ldap://localhost -d5 
@(#) $OpenLDAP: slapd 2.4.8 (Jun 24 2008 04:21:32) $

root@:/pkg_comp/obj/pkgsrc/databases/openldap-server/default/openldap-2.
4.8/servers/slapd
daemon_init: ldap://localhost
daemon_init: listen on ldap://localhost
daemon_init: 1 listeners to open...
ldap_url_parse_ext(ldap://localhost)
daemon: listener initialized ldap://localhost
daemon_init: 2 listeners opened
ldap_create
ldap_url_parse_ext(ldap://127.0.0.1)
ldap_create
ldap_url_parse_ext(ldap://127.0.0.1)
ldap_create
ldap_url_parse_ext(ldap://127.0.0.1)
ldap_simple_bind
ldap_sasl_bind
ldap_send_initial_request
ldap_new_connection 1 1 0
ldap_int_open_connection
ldap_connect_to_host: TCP 127.0.0.1:389
ldap_new_socket: 8
ldap_prepare_socket: 8
ldap_connect_to_host: Trying 127.0.0.1:389
ldap_pvt_connect: fd: 8 tm: 30 async: 0
ldap_ndelay_on: 8
ldap_int_poll: fd: 8 tm: 30

If I remove ldap://localhost from nss_ldap.conf, is works fine. Any idea
how to get that working?

Here is nss_ldap.conf:
BASE    dc=example,dc=net
URI     ldap://localhost ldap://ldap.example.net
TLS_CACERT      /etc/openssl/certs/ca.crt
TLS_REQCERT     demand

-- 
Emmanuel Dreyfus
http://hcpnet.free.fr/pubz
manu@netbsd.org