It worked, thanks! now it can bind properly (still not working though but I keep digging).
For reference, the line I added in the /etc/samba/include.conf of the AD container is the following:
ldap server require strong auth = no
thanks a lot!
Etienne