At certain times it is not possible to login with an LDAP userid and password.
registry.log
[ServerRequestResponder 2] ERROR com.ca.ad.sv.iam.IAMClient - IAM server returned error while obtaining access token
org.keycloak.authorization.client.util.HttpResponseException: Unexpected response from server: 500 / Internal Server Error
IAM server.log
ERROR [org.keycloak.storage.ldap.idm.store.ldap.LDAPOperationManager] (default task-13) Could not query server using DN [ouxx] and filter [(&(cn=xx)(objectclass=person)(objectclass=organizationalPerson)(objectclass=user))]: javax.naming.CommunicationException [Root exception is java.net.ConnectException: Connection timed out: connect]
...
Caused by: java.net.ConnectException: Connection timed out: connect
Release : 10.6
Component : CA Application Test
The problem may be caused by a network issue.
Intermittent errors can indicate a problem with the network.
For one customer this was resolved by using a different LDAP URL.