authentication with ldaps against samba active directory

[Joachim]

Hello,
I installed subsonic on Ubuntu and am trying to configure it to authenticate against samba active directory which happens to require ldaps. My configuration is like
ldap url: ldaps://ad.samba.example.com:636/cn=Use ... ple,dc=com
ldap search filter: (sAMAccountName={0}) (unchanged)
ldap manager dn: cn=Joachim,cn=Users,dc=samba,dc=example,dc=com
automatically create users in subsonic is ticked (on)
the ad is using letsecnrypt certificates.
When I try to login to subsonic, I get "Wrong username or password."
Q: how can I debug the issue?
Q: as subsonic is java based I suspect it might need a key store with proper ca certs.
Q: what other pitfalls should I look into?
Thanks,
Joachim

[jsj123]

My LDAP Manager DN is user@domain.com

[Joachim]

using a different dn didn´t solve the issue. Using tcpdump I can see subsonic connects to ldaps, but it looks like the connection doesn´t succeed for whatever reason. Obviously I cannot read the content transfer.
How can I turn on traces to see whatever error message come up?

[Joachim]

I figured it out: there are logs in /var/subsonic/.