bound clients unable to authenticate

i’ve got a seven tiger (10.4.4 and 10.4.5) clients authenticating against an OD (10.4.4). when i configure the OD as an LDAP host on the clients, they can authenticate and perform user/group lookups as long as i *don’t* bind them when i add the LDAP server.

if i go back and perform a bind, or if i bind them at the time i configure the LDAP server, then they lose the ability to query the directory (which means you can’t authenticate to cleanly unbind from it either).

is there a reason why i would suddenly be unable to perform directory lookups after binding to the OD? it’s not just authentication, i can’t even open a terminal and type “id [short username]” and get the user’s UID and group memberships back.

-jacob