hang on, I've changed the "non-LDAP" GUI passwords for the syncthing admin user on both machines and the errors don't seem to come back after restarting both syncthing instances. So the "static" admin user passwords in syncthing now are the same, but they're different from the LLDAP admin user password (who anyway doesn't have the right LDAP group membership to access syncthing)