clients can not connect “Additional pre-authentaication required”?

I need some help decoding some log messages. I have on open directory master set up within a larger university environment. I am only running AFP, iCal, iChat, Opendirectory, Print, SMB and Web services. I'm relying on the U servers for DNS, etc.... So far non of my LDAP authenticated users (/LDAPv3/127.0.0.1) can log in from client machines. The clients are bound to the server with directory admin utility on each client. I suspect that I suspect that I am missing some set up piece and am overlooking something. Here are the log messages I am getting: Kerberos Administration Log: Sep 17 09:47:52 truffula.fr.umn.edu kadmin.local[57362](info): No dictionary file specified, continuing without one. Kerberos Server Log: Sep 17 09:48:15 truffula.fr.umn.edu krb5kdc[106](info): AS_REQ (1 etypes {1}) 128.101.74.131: NEEDED_PREAUTH: sbarrott@TRUFFULA.FR.UMN.EDU for krbtgt/TRUFFULA.FR.UMN.EDU@TRUFFULA.FR.UMN.EDU, Additional pre-authentication required Sep 17 09:48:15 truffula.fr.umn.edu krb5kdc[106](info): AS_REQ (1 etypes {1}) 128.101.74.131: NEEDED_PREAUTH: sbarrott@TRUFFULA.FR.UMN.EDU for krbtgt/TRUFFULA.FR.UMN.EDU@TRUFFULA.FR.UMN.EDU, Additional pre-authentication required Sep 17 09:48:15 truffula.fr.umn.edu krb5kdc[106](debug): handling authdata Sep 17 09:48:15 truffula.fr.umn.edu krb5kdc[106](debug): handling authdata Sep 17 09:48:15 truffula.fr.umn.edu krb5kdc[106](debug): .. .. ok Sep 17 09:48:15 truffula.fr.umn.edu krb5kdc[106](debug): .. .. ok Sep 17 09:48:15 truffula.fr.umn.edu krb5kdc[106](info): AS_REQ (1 etypes {1}) 128.101.74.131: ISSUE: authtime 1253198895, etypes {rep=1 tkt=16 ses=1}, sbarrott@TRUFFULA.FR.UMN.EDU for krbtgt/TRUFFULA.FR.UMN.EDU@TRUFFULA.FR.UMN.EDU Sep 17 09:48:15 truffula.fr.umn.edu krb5kdc[106](info): AS_REQ (1 etypes {1}) 128.101.74.131: ISSUE: authtime 1253198895, etypes {rep=1 tkt=16 ses=1}, sbarrott@TRUFFULA.FR.UMN.EDU for krbtgt/TRUFFULA.FR.UMN.EDU@TRUFFULA.FR.UMN.EDU LDAP Log: Sep 17 09:48:15 truffula slapd[40]: