JNDI not able to find users

You probably have it configured to successfully talk to AD (good), but in a way that it does not find anything (bad).  As long as it can talk, it won’t throw any errors, even if it can’t find anything.

1. Make sure the user accounts exist at the same level as your search base, or deeper if the search scope is set to subtree.
2. If using a user filter, make sure the user accounts are a member of the group(s) being used by the filter.  
3. Make sure the user filter (if used) is a security group, not an OU.  The filter does not work if the user accounts are simply in an OU.

It can be helpful to use a 3rd party LDAP tool to visually see what the JNDI adapter is seeing in AD.  I prefer Apache Directory Studio (no installation required), but here are plenty of other tools out there. 

It is possible to enable debug logging and see exactly what the JNDI adapter is getting back from each query.  

• com.infoengine.log DEBUG
• wt.org.LdapServices DEBUG
• wt.org.ldapservices.verbose

References:

• https://www.ptc.com/en/support/article/CS29445
• Article - CS29454 - How to configure access to an additional LDAP Directory in Windchill PDMLink