I already tried a lot of options, there's no explanation why I set the same value to ldap.user.roles.ctx and ldap.role.ctx and it works and when I set for only ldap.role.ctx it doesn't work.
I already looked the java docs, and all the mandatory fields are correctly provided.
I'm out of ideas already, for now I'll use ldap.user.roles.ctx.