Could it be a programming error in 389-ds-base?
After all, the error message we're getting is:
[06/Jun/2023:14:41:05.346079522 +0200] - ERR - slapi_ldap_bind - Could not send bind
request for id [cn=replication manager,cn=config] authentication mechanism [SIMPLE]: error
-1 (Can't contact LDAP server), system error -5987 (Invalid function argument.),
network error 0 (Unknown error, host "consumer.mydomain.example:636")
which contains "system error -5987 (Invalid function argument.)". That log seems
to be created by slapi_ldap_bind in file:
https://github.com/389ds/389-ds-base/blob/c6b2236c39e248005fa5ccd3aecdc0d...
which is called by
https://github.com/389ds/389-ds-base/blob/c6b2236c39e248005fa5ccd3aecdc0d...
So could it be that there is a bug in this call (or in the slapi_ldap_bind implementation
itself). Apparently, slapi_ldap_bind seems to be also only called by the replication,
chainingdb and dna plugins, so maybe that is the reason why the error doesn't occur
anywhere else.
Kind regards
Jakob