Does the user account used to look up LDAP exist in the path provided in the config?
We had this in earler versions of JSS, seems fix now as of 10.16.1.
One test we did that seemed to resolve this issue for a random amount of time was to run a test on both "User Mappings" and "User Group Mappings", the resolution time varied between 2 days and a couple of weeks. we could never work out what was causing the issue, our networks team could not help with why it was happening.
Just suddenly resolved when we updated the JSS, with no change in the settings for LDAP / AD. Hope this helps.
@atomczynski: Yes, the user account used to look up LDAP exist in the path provided in the config.
@ dmw3: I did try your solution but no luck.
Hi @aarongrant my first thing to check with these problems is to use some sort of LDAP test tool to check whether the address, port and account are all working. There are plenty of free tools that can do this. On Windows I like Softerra LDAP Browser.
Once you convince yourself the account and connection are ok you can look further.