The go-ldap project has released version 3.2.3 of its LDAP API for Go. This release appears to fix an issue that prevented it from correctly decoding the password policy response control described in draft-behera-ldap-password-policy.