Just updating this post with the bug report. I can confirm that the 2.9+ enrol_ldap plugin is broken in some way.
https://tracker.moodle.org/browse/CONTRIB-5821
If you blank the function "sync_user_enrolments($user)" in {www}/enrol/ldap/lib.php
then purge all caches it's at least temporarily fixed.