Then either slurpd or syncrepl can be used to keep the slaves'
configurations up to date.
To follow up on this, it is impossible to do this with slurpd unless you
are using simple binds with the same password on all the database
backends on the replica and master, as slurpd can only store one way to
bind to a slave (i.e., I cannot have it bind to the slave using
SASL/GSSAPI for dc=stanford,dc=edu, and simple binds for cn=config). And
cn=config does not support binding to it with anything other than simple
mechs (at least until ITS#4192 is addressed).
I guess I'll have to try delta-syncrepl instead.