From b243d7e41964c2971164b6d1beaa4bab91a1ea0f Mon Sep 17 00:00:00 2001
From: Jesse McConnell <jesse.mcconnell@gmail.com>
Date: Mon, 2 Jul 2012 07:58:12 -0500
Subject: [PATCH] [JETTY-1530] refine search control on ldap login module

---
 .../java/org/eclipse/jetty/plus/jaas/spi/LdapLoginModule.java    | 1 +
 1 file changed, 1 insertion(+)

diff --git a/jetty-plus/src/main/java/org/eclipse/jetty/plus/jaas/spi/LdapLoginModule.java b/jetty-plus/src/main/java/org/eclipse/jetty/plus/jaas/spi/LdapLoginModule.java
index 5f7401724af..a939937e665 100644
--- a/jetty-plus/src/main/java/org/eclipse/jetty/plus/jaas/spi/LdapLoginModule.java
+++ b/jetty-plus/src/main/java/org/eclipse/jetty/plus/jaas/spi/LdapLoginModule.java
@@ -327,6 +327,7 @@ public class LdapLoginModule extends AbstractLoginModule
         SearchControls ctls = new SearchControls();
         ctls.setDerefLinkFlag(true);
         ctls.setSearchScope(SearchControls.SUBTREE_SCOPE);
+        ctls.setReturningAttributes(new String[]{_roleNameAttribute});
 
         String filter = "(&(objectClass={0})({1}={2}))";
         Object[] filterArguments = {_roleObjectClass, _roleMemberAttribute, userDn};