I installed SSPR 4.2 using my test eDirectory as its LDAP source and it
worked fine in all respects. I then wiped the configuration and ran the
guided install again, this time specifying the production tree as its
LDAP source. It refuses to save the challenge responses, giving me a
5045 error. I have double- and triple-checked the rights assignments
from the documentation, specifically that [This] has write privileges to
pwmResponseSet and userPassword. What else could be wrong?

eDirectory version information:

Test
highest version -- eDir 9.0.3 HF1
lowest version -- eDir 8.8.8 Patch 5

Prod
highest version -- eDir 8.8.8 Patch 10 HF1
lowest version -- eDir 8.8.7

The product documentation says eDirectory 8.8.8 Patch 10 is a
requirement -- does that mean ALL servers must be at or above that
level? If so, the test environment should also fail.

Thoughts?

Thanks