LDAP Auth - Always fails

[dcbell]

This is a fresh netbox install. I used the examples from https://netbox.readthedocs.io/en/stable/installation/6-ldap/ to setup LDAP authentication against a Windows AD domain. But when attempting to login, the login attempt always fails. The log file doesn't seem to provide much info, even though its set to debug level. All it says is "Authentication failed for xxxx: user DN/password rejected by LDAP server." Here is my sanitized ldap_config.py file. Is there something obvious I'm missing?

import ldap
from django_auth_ldap.config import LDAPSearch, NestedGroupOfNamesType
import logging, logging.handlers

## Logging
logfile = "/opt/netbox/logs/django-ldap-debug.log"
my_logger = logging.getLogger('django_auth_ldap')
my_logger.setLevel(logging.DEBUG)
handler = logging.handlers.RotatingFileHandler(
logfile, maxBytes=1024 * 500, backupCount=5)
my_logger.addHandler(handler)

## Server Config
AUTH_LDAP_SERVER_URI = "ldaps://hostname.domain.local"
AUTH_LDAP_CONNECTION_OPTIONS = {
    ldap.OPT_REFERRALS: 0
}
AUTH_LDAP_BIND_DN = "CN=netbox,OU=Service Accounts,OU=Accounts,DC=DOMAIN,DC=local"
AUTH_LDAP_BIND_PASSWORD = "SuperPassword"
LDAP_IGNORE_CERT_ERRORS = True

##User Search
AUTH_LDAP_USER_SEARCH = LDAPSearch("OU=Accounts,DC=DOMAIN,DC=local",
                                    ldap.SCOPE_SUBTREE,
                                    "(sAMAccountName=%(user)s)")
AUTH_LDAP_USER_DN_TEMPLATE = "uid=%(user)s,OU=Accounts,DC=DOMAIN,DC=local"
AUTH_LDAP_USER_ATTR_MAP = {
    "first_name": "givenName",
    "last_name": "sn",
    "email": "mail"
}

## Group Search Config
AUTH_LDAP_GROUP_SEARCH = LDAPSearch("OU=Groups,DC=DOMAIN,DC=local", 
                                    ldap.SCOPE_SUBTREE,
                                    "(objectClass=group)")
AUTH_LDAP_GROUP_TYPE = NestedGroupOfNamesType()
AUTH_LDAP_REQUIRE_GROUP = "CN=BaseGroup,OU=Groups,DC=DOMAIN,DC=local"
AUTH_LDAP_MIRROR_GROUPS = True
AUTH_LDAP_USER_FLAGS_BY_GROUP = {
    "is_active": "CN=ActiveGroup,OU=Groups,DC=DOMAIN,DC=local",
    "is_staff": "CN=StaffGroup,OU=Groups,DC=DOMAIN,DC=local",
    "is_superuser": "CN=SuperGroup,OU=Groups,DC=DOMAIN,DC=local"
}
AUTH_LDAP_FIND_GROUP_PERMS = True
AUTH_LDAP_CACHE_TIMEOUT = 3600