New users are in the appropriate AD group but cannot log in to Spectrum. 'SPC-OCA-10474: Invalid user name or password.’

Products

• Network Observability
• Spectrum

Issue/Introduction

We enabled AD-based authentication to Spectrum using AD groups back in the summer.

Looks like this may not be working anymore.  New users are in the appropriate AD group but cannot log in to Spectrum. 

They get the error

'SPC-OCA-10474: Invalid user name or password.’

Environment

Spectrum 24.3.9

Cause

In the catalina.out we see this error:

 

WARN  com.aprisma.errorlog - Exception occcured in findUserGroup : javax.naming.NameNotFoundException

 

This matches rally defect DE176066 

Resolution

Apply spectrum ptf - 

Spectrum_24.03.09.PTF_24.3.901

Or upgrade to 25.4.4+ (ptf included in this version)