LDAP not authenticating users for login

You might consider moving to IdM as it includes Kerberos and a PKI service in addition to LDAP (389 server) and upstream has Ansible playbooks (I used my own before finding them) for easy configuration of servers and replicas.