By Harry Coin:

1)  The problem long discussed upstream to do with LDAP auth wanting the user name offered after the PASS command to stick around for later vcard use.  The approach is to have vcard related searches use the citserver username to search against the ldap CN, while login searches behave as in the release version.

2) The vcard has a field uid, which citserver uses to tag vcards  for uniqueness.  LDAP also has a uuid for each of its records, most aptly saved also in the vcard as uuid.  These collided causing the vcard to be reloaded every check owing to the overwriting the LDAP written uid over the citserver use of the same field. The patches below use the RFC approved 2.1 X- extension to support the field X-UUID for the ldap uuid.  There's also small code cleanup to avoid setting the UID twice.