Well, I guess I wasn't stumped after all. I traced the bind with Ethereal and found that openldap is ignoring the BINDDN and BINDPW entries in ldap.conf. When I provided them on the command line everything works.
Sorry, I should have tried that before posting.
--Quanah
-- Quanah Gibson-Mount Principal Software Developer ITSS/Shared Services Stanford University GnuPG Public Key: http://www.stanford.edu/~quanah/pgp.html