LDAP Lockout policy in Nexus Community Edition

Our Nexus 3.80.0 server is connected to and is authenticating against our active directory server binding using a service account.

However, this seems to bypass the server’s lockout policy, as the users can fail to authenticate an unlimited number of times. Some cursory searching online indicates that instead of using a service account, we should be using anonymous authentication and then using the user credentials to bind to the LDAP server.

I can’t find any specifics on how to configure that. Does anyone have any advice on how to make sure the ldap policies are enforced?