Run ldapsearch with a "-d 255" & post the results.
When I connect without specifing "-x" (non-sasl), I get this:
SASL/GSSAPI authentication started
ldap_sasl_interactive_bind_s: Local error (82)
additional info: SASL(-1): generic failure: GSSAPI Error: Miscellaneous failure (No credenti
als cache found)
(The solution for this was to run "kinit" prior to running ldapsearch).
But if I run it with "-x", it works...