I do believe in one attempt I did change the cn=users to ou=users and had the same issue. But I can give a try just to make certain.
Unisys | Mobile Phone 586.214.9017 | mark werner unisys com
11720 Plaza America Drive, Reston, VA 20190
THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all devices.
From: Jon Stanley [mailto:jonstanley gmail com]
In addition to Clayton's question of the exact messages, this configuration looks bad - I'm not sure if it's a problem in your redaction of the configuration, or if it's real - 'cn=openshift,cn=users,dc=domain,dc=local' has 2 CN's in it - should be 'cn=openshift,ou=users,dc=domain,dc=local'
Description: S/MIME cryptographic signature