Thanks, David.  Skipping SSL for the time being makes perfect sense.

But now, I'm confused.  I use synchronization, right?  Now, I'm getting the 
following error:

The comsumer initialization has unseccessfully completed.
The error received by the replica is: '49 - LDAP error - invalid credentials'

Wher am I going wrong?

  
This would typically be a typo in either the bind DN or the password
supplied for the sync agreement.