Today, the LDAPRunner is responsible for storing the runtime-settable LDAP parameters. There is very limited testing to ensure that the runtime-settable options properly take effect on LDAP connections in a defined manner. Adding these tests will increase confidence that runtime LDAP configuration updates do not cause server crashes or undefined behavior.

The connection pool is also not informed when the set of LDAP hosts is changed at runtime, causing it to continue maintaining a pool of connections to the old hosts.