The "cn=config" suffix is not in "o=Netscape
Root". It is it's own
suffix that is really uses the dse.ldif file as it's "back-end
database". You can use the same user that you already have for
replicating "o=Netscape Root".
Oh, that makes sense! I'll give it a shot, thanks very much!
Brian