I'd look to see if this user exists on both servers and the 389-ds access logs on both to see what is going on.
The user exists, and access logs tell me: ``` BIND dn="uid=admin-freeipa2.infra.opensuse.org,ou=people,o=ipaca" method=128 version=3 RESULT err=49 tag=97 nentries=0 etime=0 - Invalid credentials ``` over and over and over again
LCP [Stasiek] https://lcp.world/