Binding to open directory, invalid credentials supplied

I recently upgraded our Open Directory server from 10.6.8 to 10.7.4. After the upgrade I could no longer access our LDAPv3 subnode so all of our workgroup manager settings were gone. I kept getting an error that the diradmin password was wrong, even though I did not change it.

I managed to get things working on the server by binding it to ittself using the name of the old LDAP subnode, and I can see all of our old WGM groups and settings and can manage existing clients.

However, I cannot bind new machines to the server, or re-bind existing ones. I get the invalid credentials supplied error every time. I have been unable to find any information in log files on either client or server to help.

Reseting the diradmin password has not helped.

This morning I upgraded again to 10.8. That also did not solve the problem.

Any ideas?