If the LDAP infrastructure temporarily becomes unavailable, the broker caches the failure and no longer attempts to authenticate/authorize the user.  Note - this behavior occurs with the security-invalidation-interval configured to a longer time period.

Desired behavior - if the ldap infrastructure has a connectivity problem, the broker should attempt to authenticate on subsequent logins.