All the details are here:
https://github.com/jenkinsci/active-directory-plugin/pull/41

Basically, by doing this you might be locking an user account with a bad password specially in case where the ldapServers are discovered automatically by the plugin, as it will be trying to authenticate through all the tree getting BadCredentialsException and then you might be locking your account per hitting the max of retries.