To close the loop. Also posted question to shiro-user list. No response...
but findings added there.http://mail-archives.apache.org/mod_mbox/shiro-user/201801.mbox/%
secure ldap (over port 636).
protocol types of connections that may be pooled. Valid types are "plain"
calls per min) but there is some cost in establishing TLS connection.
connection to source LDAP?