When using the Active Directory plugin to connect to the Amazon Simple Directory Service, get inconsistent login management. Some accounts are able to login, but most result in login failures. Does not seem to be any consistency in account attributes of the failing or succeeding SDS-provided accounts. Checking the extended logs, it appears the plugin is finding all valid users but is not allowing most to authenticate and no useful errors are logged.

Note: our directory is set up to mandate four-class passwords that are 14+ characters long. Does not seem to be any obvious password-characters sensitivity evidenced that.

Can provide further information on request. However, such information will come from new instances (have been terminating each Jenkins-server as troubleshooting attempts fail to provide resolution).