LDAP user VNC screen sharing suddenly broke. Other LDAP users work, local admin works
The LDAP user had changed their password, but their login keychain on this box still needed to be updated. Apparently, you can't log in via VNC if your login.keychain password and your account password don't match.

I discovered this when I VNCed in as a different user, then logged out, and then tried to log in as the affected user. I was able to log in, but then I received a prompt saying:


  The system was unable to unlock your login keychain.




I chose Update Keychain Password, and entered the old LDAP password, and everything worked!