Every few days we have to restart the system hosting the primary hub to get LDAP authentication working again.
A dual DC (domain controller) setup was used and randomly the hub would be pointed to the wrong DC.
Release : 20.3 and later.
Component : UIM - HUB
Setup a VIP for a dedicated DC/AD server.