I'd look to see if this user exists on both servers and the
389-ds
access logs on both to see what is going on.
The user exists, and access logs tell me:
```
BIND dn="uid=admin-freeipa2.infra.opensuse.org,ou=people,o=ipaca" method=128
version=3
RESULT err=49 tag=97 nentries=0 etime=0 - Invalid credentials
```
over and over and over again
LCP [Stasiek]
https://lcp.world/