not obvious how to disable groups

The control panel and PAS properties let you enter group settings but don't tell you want to do if you don't have an ldap that supports groups. Then you end up with errors like https://github.com/collective/pas.plugins.ldap/issues/40 and can prevent login.

The solution is go into the acl_user/pasldap/active and disable all the plugin from all the group features.

It would be nice if this is exposed in the controlpanel so you can just disable group support and hide the group settings completely.

Start by reviewing the control panel and PAS properties mentioned in the issue, then inspect acl_user/pasldap/active and the existing group-related plugin settings. Confirm how disabling all group features currently prevents LDAP group errors, and define the control-panel behavior needed to disable group support and hide its settings.

Written by the indexing model from the issue text.