You may see entries such as the following in the system.log in Mac OS X Server:
/usr/sbin/PasswordService: client response doesn't match what we generated
This message means that user authentication did not work due to an incorrect password.
In most cases, this occurs when someone mistypes his or her password when logging in.
You can find more details in the Password Service Server log.
Note: If your Mac OS X client computers are set up to bind to LDAP using a computer name and password in Directory Access, and the password for that account has expired or been changed, you will see this message. To resolve it, you must unbind and rebind each client using the correct password.