When migrating from a server version earlier than 2022x Refresh1, you must delete duplicate external LDAP users with usernames in different cases (e.g., JOHN and john) if such usernames exist. Leave just one user. Otherwise, authentication of these duplicate user entries might fail in 2022x Refresh1 or newer versions.