Debug query logging?

How do you enable debug-level logging for LDAP queries? We have several cases where devices don't want to talk to the 389-ds-base LDAP server even though they support LDAP. I'd like to get more info about exactly what they're looking for, failing on, etc.