osTicket Ver: 1.18.2
Web: Apache 2.4.62
MySQL 10.11.11
PHP: 8.2.29
We have been running osTicket a long time now (since v1.5). Our setup uses the Multi LDAP Authentication plugin (v1.9.15) as our AD is a little crazy and for many years our agents have been logging in with their domain credentials but the users have only ever been able to submit via email.
Our management, in their infinite wisdom, have finally decided that they want the users to login and create certain tickets using forms, except it's not working for them!

The check connection reports no errors

If a user tries their AD password, even if the account is activated, they get "access denied"
If the user tries the password reset link, they get "Unable to reset password, Contact your admin"
If an agent sends them a password reset link from within the SCP, they can set a password but when they log out, the password doesn't work on next login.
Can anyone give me an idea on what I need to set to get the users logging in?
Thanks