Somewhat of a workaround - slapi should not be doing anything here unless the filter was actually changed.

syncprov is using (objectclass=*) which frankly no plugin should be rewriting, so this will cover it for the most part. Aside from that it looks like this area of the slapi interaction needs some redesign.

Ignore my earlier noise please--an old (unpatched) libslapi library was present on the system from earlier debugging attempts, this was what caused the recent crash.

Your patch seems to work! Thank you for your quick response; we now have a shot at going forward with the OpenLDAP deployment.

Tim