Hi @hector
AFAIK, you need to get a valid SSL for your AD (Easy enough if running on NethServer).
A lot of Apps, especially Java and PHP programmed stuff, which can use AD require a valid SSL.
Here’s the link about AD n NethServer:
Search for the sub-title " The next step will make sure that java and other more strict apps can connect to the AD and use it :"…
You will still need to change the LDAP into LDAPs in the query, and also change the LDAP Port to 636.
Dirección del servidor LDAP ldaps://192.168.86.4
Puerto de servidor LDAP 636
As to TLS: you may need to try both options, I think TLS should work.
Good Luck!
I have this working at home, not for Odoo, but a similiar “strict” App…
My 2 cents
Andy