InitialLdapContext ctx = null;
try
{
   //...
   ctx = new InitialLdapContext(env, null);
   if (PicketBoxLogger.LOGGER.isTraceEnabled())
   {
      PicketBoxLogger.LOGGER.traceSuccessfulLogInToLDAP(ctx.toString());
   }

   if (bindDN != null)
   {
      // Rebind the ctx to the bind dn/credentials for the roles searches
      PicketBoxLogger.LOGGER.traceRebindWithConfiguredPrincipal(bindDN);
      env.setProperty(Context.SECURITY_PRINCIPAL, bindDN);
      env.put(Context.SECURITY_CREDENTIALS, bindCredential);
      ctx = new InitialLdapContext(env, null);
   }
   // ...
}
finally
{
   // Close the context to release the connection
   if (ctx != null)
      ctx.close();
   // ...
}