yay, *sigh* as it turns out there WAS a change made on the cAptive Directory side that resulted in a password policy being enforced, wherein an attribute error would make sense, but would think the numerical result codes would change somewhat to reflect this rather than the same as a malformed message.
So it works as it should and at least sanity is once again confirmed. Thanks for everyone's input! -ericb
