Somehow "Be use current security context" which is our AD account works for prod and doesn't works for test server
In sp_addlinkedsrvlogin we changed @useself=True to False and explicitly used username and password and recreated the LDAP. Then bingo!