I am just guessing here, but start in /var/log and grep for something you expect would be in the log, eg an AD username you're testing with. If you're not certain which subdirectory, you can
grep -i username `find -type f`
[-i to make it case-insensitive].