LDAP manages the "failed attempts (duration, locks)" so it would be best to have the Global Settings disabled for LDAP I.E "Failed attempts" section in Global Settings to be disabled for LDAP.
This would be 2 sets of password management for LDAP users