Every few days we have to restart the system hosting the primary hub to get LDAP authentication working again.
Release : 20.3 and later.
Component : UIM - HUB
A dual DC (domain controller) setup was used and randomly the hub would be pointed to the wrong DC.
Setup a VIP for a dedicated DC/AD server.