Eu descobri que o método (Deploy Studio) estava implantando minhas imagens já tinham scripts para fazer a ligação Open Directory - modifiquei os scripts um pouco para dar o ponto crucial do script para responder a minha pergunta. Este exemplo usa somente ligação anônima (não vinculada explicitamente ao servidor de OD)
#!/bin/sh
# Used ds_open_directory_binding.sh (v1.6) from Deploy Studio as a base for the explicit question.
# I recommend downloading Deploy Studio (http://deploystudio.com) to see other methods but the crux
# of how it is done can be read here. (eg. no error checking here)
#Enable LDAPv3 Plugin
defaults write /Library/Preferences/DirectoryService/DirectoryService "LDAPv3" Active 2>&1
chmod 600 /Library/Preferences/DirectoryService/DirectoryService.plist 2>&1
/usr/sbin/ipconfig waitall
#Configure LDAP
dsconfigldap -a 'server.example.com' 2>&1
#Restart DS
killall DirectoryService
sleep 5
#Create Search Policy
dscl localhost -create /Search SearchPolicy CSPSearchPath 2>&1
#Create Contacts
dscl localhost -create /Contact SearchPolicy CSPSearchPath 2>&1
#Add OD Server to the search path
dscl localhost -append /Search CSPSearchPath '/LDAPv3/server.example.com' 2>&1
#Add OD Server to Contact Search Policy
dscl localhost -append /Contact CSPSearchPath '/LDAPv3/server.example.com' 2>&1