If the jndi.ldap.config property isn't set, for example, LdapUserManager.getUser() just logs a warning and returns null. IMO it should just throw an exception. The system could be running for a while before someone notices something is wrong with the configuration.
I'm sure there are a whole bunch of places where this happens, so I'm opening this ticket to try and collect/review them all.