There will be DirContext suppling service, which will be referenced by LDAP realm:

• output of service will be ExceptionSupplier<DirContext>, but the returning DirContext will be only delegator, which will call real DirContext and instead of close() it will do returnContext()
  Problematic place: DirectEvidenceVerifier
• context can be copied using (Context)ctx.lookup("")
• probably "we can take a DirContext obtain the environment settings from it and just place in the name and credential being tested and create a new contex - if that is possible we can eliminate needing our own factory interface if possible "