Where a security realm is configured to load groups from LDAP it should not cause an authentication failure if the user is not found in LDAP.

One example is local authentication where the user may not exist.

Another is domain mode servers where the servers have a custom name and generated password that they use to connect back to the local host controller.