Though this is not the root cause, a very important contributing factor is that LDAP client did not write down timeout of 30 seconds in ldap.conf in spite of the value showing up in extended options.