After enabling debug logging I found that the issue isn't with LDAP, rather that the OSS version of JFrog doesn't support JFrog groups:
Search Ldap groups only supported for Pro license