trace authentication between linux and windows ad server

edit

Running RHEL 7.6 with users that authenticate to a Windows Server 2016 AD server. I'd like to capture the authentication of a specific user from the RHEL system to the AD server. Can someone give me the tshark command line options to see the full login trace, password an all ? Thanks, wbrunc