The problem happens with users where the sAMAccountName(Active Directory user id parameter) have hyphen. We have an user called "ti-bgv" that cannot authenticate because of this issue. There are several other users on the same group and with the same access to objects, and they can login correctly if no hyphen makes part of the uid.

Whenever ti-bgv tries to authenticate, a "Login name or password is incorrect." is shown.

Other aspects of the user:

• It´s inside the same DC and OU of other users with the same group permissions;
• Has an hyphen because we use IATA codes, and it is a generic IT user operator. "ti-bgv" - IT user operator at Bento Gonçalves, Brazil; We have another users with hypen (ti-mao, ti-bel) and none of them work.
• Password never expires;
• Password cannot be user changed;
• The user is enabled on Zabbix;
• The user is marked as blocked after 5 login tries;

I don't know if this issue will reproduce on OpenLDAP using "uid", because i don't have one with a valid userbase to test.