Shib IdP v 4.2.1 + LDAP connections in Tomcat

[Cantor, Scott]

It's notable, perhaps, that the Ldaptive ConnectionFactory interface in 1.x does not have a close() method and the 2.x interface does (and at present the newer code isn't calling that as part of the bean destroy hook, but probably should).

If it existed in 1.x, I'd patch my IdP to call it as a quick test but no such luck.

It doesn't explain why it isn't getting GC'd anyway, but it seems likely to be connected to the problem.

-- Scott