The error sent to SOAP clients only includes the message of the exception, not the cause. Since around 2.1, when exceptions are wrapped in SpringLDAPConnector the message is just the username.

The wrapped exceptions should include the underlying message as part of the text so it's visible to SOAP clients.