Errors in Workgroup Manager / Unable to change user passwords

We are starting to see at several different school locations this problem popping up.

Workgroup Manager erring with “Error of type eDSAuthFailed (-14090) on line xxxx of /SourceCache/WorkgroupManager/WorkgroupManager-361.3.1/Plugins/UserAccounts/UserAdvancedPluginView.mm”

And sometimes I’ll get the error: “This action failed because you are not authorized to perform the operation”

All of the affected servers have been running 10.6.4, logged in as the diradmin user.

I get the 14090 error even if I use dscl instead of WGM.
I’m just curious if anyone else has been seeing this type of behavior as i have 5 separate school districts with the same error.

One of my colleagues has mentioned that a db_recover was able to resolve some of this, but not all of it.
Let me know if there is any way to fix this once it starts popping up.

Thanks!
-Henry