The internal Adeloader service checks passwords via LDAP. When a user tries to log in, the logs show an 'Authorization denied' error. What are your diagnostic actions?

To diagnose the "Authorization denied" error when verifying a password via LDAP in the Adeloader service:

1. Check the correctness of credentials: ensure that the username and password are transmitted correctly.

2. Check LDAP connection settings: server address, port, protocol (LDAP/LDAPS), authentication parameters.

3. Check user permissions in LDAP: the user may not have authentication rights or may be blocked.

4. Review LDAP server logs: there may be a reason for authorization denial.

5. Check the LDAP request format: user DN, search filters, schema compliance.

6. Verify if the password has expired or if a password change is required.

7. Check network connectivity between the service and LDAP: firewall, routing.

8. Check if LDAP security policies have changed (e.g., encryption requirements).

9. Test authentication manually using ldapsearch or similar tools.

10. If caching or proxy is used, check their status.

Thus, diagnostics start with checking connection parameters and credentials, then logs and user permissions are analyzed.