In security/LDAPBindSecurityRealm.groovy, the following config option is hard coded:

extraEnvVars = [(Context.REFERRAL):"follow"];

Attempting to use Active Directory's LDAP server fails due to the fact that AD
referrals aren't 100% compatible with LDAP itself. Is it possible for this to
be implemented as a configurable options?

Just for reference, the value above can be set to "follow", "ignore", or "throw".

Andrew