ADS authentication with SASL works with old password

[ram]

I am using cyrus with SASL authenticating against an ADS server 

The problem is when user changes the password , Both the old password
and new password work.

So the user has to change the password twice to *really* change the
password. I tried restarting saslauthd , cyrus etc but doesnt help 

Where is the old password getting cached ?? 


Thanks
Ram