Auth failed is a good sign. This diagnostic is designed simply to test that your AAA servers are in-service/responding, not for testing an AD account.
If you were to get a timeout, then you would check the server.
If you look at the incoming packet in ClearPass, it doesn't contain the same attributes as a wireless authentication request which is why no service template matches it and it fails. This is normal.