Added check that you're not cloning from a broken replica.  Some fixes to ldap_auth.