Thanks to the tips here and in the new LDAP article from O’Rilley I managed to solve the last round of problems by having the server’s main IP address by itself on one network card and all the other addresses on en1.
Everything seems to work well now, but two questions:

1> The LDAP direc tory includes users I ad, but the “system users” like qtss, etc are still over in netinfo. How do I get them into LDAP?

2> The first user I setup on software installation is marked with a brown slash through it. I recall reading somewhere what it means and how to solve it, but darned if I can remember how to do it.