I'm not sur I can agree about the "never failing part". That means that if somebody restart the LDAP server, for that time we are going to have complete garbish results (especially if configured variable are significantly different from the defauls, and we won't know why. 

So,
1/ what is the reason to not aknowledge the failure at that point, and deal with it at the use point ? 
2/ openOr is not the solution: there is no logging that we are in wild-assumption-world here, and we could do far better with a cache of "last seen config" (a simple mutable map that is write only most of the time, and we reald when the get failed, until it succeed again).