GetBindDNRequest fails with error -601 if the authenticated connection information is requested from an exref server. This operation works fine from an authenticated connection to a replica holder.

ldap.jar tested from 2008-08-01 developer library

Steps to duplicate:

1) Create a 2 server tree, no need to partition, or add aditional users.
2) remove all replicas from server2
3) use attached sample code against both servers.

Result
Server1 Success, the DN authenticated with is returned
Server2: Fail , Bind successful, GetBindDNRequest returns -601

From the attached ndstrace.log
 
Calling DSAReadObjectInfo conn:22 for client .admin.novell.AGS_IDM_TREE.
DSAReadObjectInfo failed, no such entry (-601).