I wanted to add two items...
1) the login issue with syncuser was because I had specified /bin/false as the shell. I fixed that, and can authenticate as syncuser, so this is not a case of a bad/forgotten/mistyped password.
2) both hosts in question are CentOS 5.2 with openldap-2.3.27-8.el5_2.4