Auth'ing against 10.4 server with 10.5?

Question

I have a 10.5.7 client which I'm trying to use with a 10.4.11 server.
I have turned Open Directory on and set it up as an Open Directory Master. I have created a user account in the Workgroup Manager and it has the "access account" checkbox checked. I have added the 10.5 client computer to the All Computers list on the server. I have used the Directory Utility on the 10.5 client to add the 10.4 server, and in Directory Utility's Advanced settings, under Search Policy, under Authentication, the server is listed in the "Directory Domains" list.
When I am at the 10.5 client login window, however, I tried to type in the short name of the user account (or the full name) and the password and it does not work. I can, however, log into the server itself with that account.
What could be wrong? Did I forget a step (I've never done this before)? Is it a firewall thing? Is my server perhaps misconfigured (it shows the account location as the-correct-domain.com/LDAPv3/127.0.0.1 -- is that last 127.0.0.1 bad or is that just part of the LDAP tree)?

Answer 1

When you bound the client to the server did you authenticate it with the diradmin details?
Make sure the TOD clocks are in sync on the server and client.
On the login screen where the machine name is, if you click on it a couple of times it will change to show any LDAP network servers that are available, green for OK, red for not and orange if you have more than one server that is bound but not all available.