After looking at the instructions for changing the Directory Manager password here: https://www.freeipa.org/page/Howto/Change_Directory_Manager_Password I noticed /root/dm_password which *does* match my Directory Manager password.
Oh gawd I just realized this means that I followed those instructions and (attempted to) change the password, didn't I. :(
I have no memory of this. :(
Sean