Right now, it's possible to configure JC LDAP to support basic authentication on macOS clients, without installing the JC agent at all. But it doesn't properly support groups, e.g. the OS can't determine a user's group membership, and I'm sure there ...