The Active Directory Plugin hides the "Site", "Bind DN", and "Bind Password" fields when the Jenkins service is not running on a Windows OS machine.

These fields are required, even in Windows, so as to Bind to an AD server in a domain other than the one upon which the server is running

Showing (UN hiding) these fields resolves the issue. Can reliably recreate the scenario