The hub probe is responsible for all security when dealing with LDAP.
The hub probe can not be restarted like other probes but making a change to logsize or loglevel will cause a restart of the hub probe which support uses regularly.
If you had the loglevel at 3 or higher when the problem and still have the logs from that time you will probably find your root cause in the hub.log files