I have upgrade VCSA to 6.5 Update 1 (from 6.5)

After this I can't login using AD credentials. administrator@vsphare.local is still working

Logs say:

Invalid credentials

exception 'com.vmware.identity.idm.IDMLoginException: Native platform error [code: 851968]

Network packects at port 389 are going. And i can add permissions at objects: vcenter sees users from AD.

"Identify Source" for domain is configured with "use machine account".

When i try to using SPN, I need type SPN as STS/domain.local, but i have error: SPN can't be found

Now i have configured AD as LDAP service, but it is not good way.

Does anyone know something about this problem ?