OD bind - KDC info not always transferring

Question

When binding a range of newly imaged 10.6.2 Macs to a 10.6.2 OD server, the local KDC information often does not transfer. When that Mac is logged on, MCX preferences then are not applied.
When I look at the Computer information in OD, in the Comment of the correctly bound Macs, I see KDC information, like :
computer_name.domain$,LKDC:SHA1.BF57C7D56C311F6A58DAEDC44538AF3FD07F2C9B$
But in the Macs that didn't bind properly, this is empty.
I properly discard the System Keychain and delete / regenerate the KDC on all the Macs, yet the problem persists. Has anyone else had this problem, as it never happened with 10.5 on client / server.

Answer 1

I suppose I could set up a replica on the file server itself, but the apple manuals usually allude to specializing services to max out performance.
That is because Apple wants to sell hardware. Realistically, an Xserve can handle the load of 60 concurrent AFP connections (not 60 network home folders). Running both AFP and OD on a single box is not going to kill it. There are many deployments that have one Xserve and they run 10 or more services on one box. Not everyone can afford separation of services.
Additionally, if you have an OD Master, you probably should be running an OD Replica. Just for the safety net that it provides. For example, having you users, groups, passwords, and policy automatically replicating is a nice warm and fuzzy. Plus, if you have a problem with the OD Master, you environment can still function.
That being said, configuring as connected to directory system is generally a good solution to avoid the extra services of directory services. Normally, this is a live lookup and no local storage is needed. Where are you not seeing the updates? In Server Admin when configuring permissions? What if you use dscl to browse the parent domain? Do you see the new groups, users, etc?
If this were a replica, the duration of time in which a sync occurs can be set. But in a connected to role, the lookups should be dynamic and this instant.
Hope this helps