The error message in the syslogs is Unable to resolve ICAP XAUTH URI "WinNT://domain/User" using LDAP.
In the past we have seen these issues due to the base DN being too specific.
Change your base DN to DC=Example,DC=net (replacing example and net with the correct values)
Incidents should now be reported with usernames