I installed SSPR 4.2 using my test eDirectory as its LDAP source and it
worked fine in all respects. I then wiped the configuration and ran the
guided install again, this time specifying the production tree as its
LDAP source. It refuses to save the challenge responses, giving me a
5045 error. I have double- and triple-checked the rights assignments
from the documentation, specifically that [This] has write privileges to
pwmResponseSet and userPassword. What else could be wrong?

eDirectory version information, in case it matters:

highest version -- eDir 9.0.3 HF1
lowest version -- eDir

highest version -- eDir 8.8.8 Patch 10 HF1
lowest version -- eDir 8.8.7