User's Cannot Authenticate

Using CLM 6.0.5 with iFix005 installed in VM server farm on Windows 2012R2 and MS SQL Server. Using JAS connected to corporate LDAP. No authentication issues until recently. Getting this error in all CLM applications:

CRJAZ2898E The user could not be authenticated because of an error with mapping the user's group memberships to Jazz security roles.

Seems similar to prior problem with LDAP query returning too many users.