39aa4bff2a
"Verbindung testen" only appeared after a config was already saved, so a fresh/never-configured tenant had no way to validate connection details at all. Now the button is always visible; POST /ldap/test-connection accepts optional ad-hoc serverUrl/bindDn/bindPassword and falls back field-by-field to the saved config for anything omitted (bindPassword in particular, since the form never re-sends the masked saved password). Verified locally: tested with typed-but-unsaved values (base DN left blank, nothing saved) and got a real connection attempt/error back, not a 404 "no config" response. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>