Error: Common Error 0xe100002d. Failed to bind to <domain_name> (dn=) as user <domain\username> with 4230 authentication type. LDAP error 0x31. Invalid Credentials (4273545)

Directory synchronization fails and the following error is found in the DSA.log:

Common Error 0xe100002d. Failed to bind to <domain_name> (dn=) as user <domain\username> with 4230 authentication type. LDAP error 0x31. Invalid Credentials (80090311: LdapErr: DSID-0C09060F, comment: AcceptSecurityContext error, data 51f, v2580).

Set a preferred domain controller (DC) for the DSA agent from within the Migration Manager for Active Directory console:

1. Go to Tools | Agent Manager

2. Right-click on the DSA agent host server in the left pane and select Properties

3. Select the domain that the DSA agent is failing to bind to

4. Select Edit

5. Add the Fully Qualified Domain Name (FQDN) of your preferred Domain Controller and Global Catalog server (if desired)

6. Click OK Twice