Configuration Errors need to be displayed for an LDAP directory if Roles are enabled and the DN's for both Groups and Roles overlap.

I would suggest writing a generic validator interface and register a list of validator's against a directory.

Validator's can be responsible for checking and reporting an error for a directory on request.