Aha! found the issue

> Yum should be getting openldap-servers version 2.2.13-12.el4_8.3
> Do you not have your sl-security repo enabled?

It was enabled, but, because we had 'protect=1' on sl-base it wasn't
being picked up:


[root@vtb-generic-34 yum.repos.d]# yum search openldap-servers
Loading "protectbase" plugin
Loading "kernel-module" plugin
Searching Packages:
Setting up repositories
Reading repository metadata in from local files
1561 packages excluded due to repository protections


openldap-servers.x86_64                  2.2.13-12.el4          sl-base
Matched from:
openldap-servers


openldap-servers-sql.x86_64              2.2.13-12.el4          sl-base
Matched from:
openldap-servers-sql


one quick edit later:


[root@vtb-generic-34 yum.repos.d]# vim sl4x.repo
[root@vtb-generic-34 yum.repos.d]# yum search openldap-servers
Loading "protectbase" plugin
Loading "kernel-module" plugin
Searching Packages:
Setting up repositories
Reading repository metadata in from local files
50 packages excluded due to repository protections


openldap-servers.x86_64                  2.2.13-12.el4          sl-base
Matched from:
openldap-servers


openldap-servers-sql.x86_64              2.2.13-12.el4          sl-base
Matched from:
openldap-servers-sql


openldap-servers.x86_64                  2.2.13-12.el4_8.3      sl-errata
Matched from:
openldap-servers


openldap-servers-sql.x86_64              2.2.13-12.el4_8.3      sl-errata
Matched from:
openldap-servers-sql


which looks far healthier


Thanks

Andrew