You have showed that the esuser credentials work which is greate but you have not mentioned anything regarding how you are attempting to authenticate with testuser and how this is failing.
- How are you trying to authenticate with
testuser? Directly with curl or in a browser ? via kibana ? - Which format are you using for the username ? As in what do you pass in as a username ?
Please set logger.org.elasticsearch.xpack.security.authc.ldap to TRACE and share some of the logs here with us.