I get
[DEBUG] USER GROUPS:Array
(
)
[WARN] Authorization by group failed. User is not authorized.
Just want to confirm that you are adding the mandatory fields as semi-colon separated fields and as group (the count for each element must match for this added functionality to work):
Domain Controller: ldaps://server1.com;ldaps://server2.com
Base DN: dc=server1,dc=com;dc=server2,dc=com
Account Suffix: @server1.com;@server2.com
The error you indicate above isn’t a domain authentication error, rather an authorization error (you’ve successfully authenticated at that point, but don’t appear to be a member of whatever group your configuration requires you to be in to proceed).
Assuming you have: two DC’s, two DN’s and two account suffixes, then I would check to see what the default group membership requirements you have (ADI Authorization tab in settings) and ensure it A) exists on Both DC’s and B) your test user is a member of it.
