I have only seen this on wireless clients, which might be part of the problem, seeing as Apple doesn’t support wireless binding. We aren’t doing “authenticated bind”, just pointing our clients (via Directory Access) to a standard Open Directory LDAP. The only way I’ve been able to solve this problem is by going into Directory Access and re-adding the entry, which for some reason disappears.