Index: jaas/modules/src/main/java/org/apache/karaf/jaas/modules/ldap/LDAPLoginModule.java
===================================================================
--- jaas/modules/src/main/java/org/apache/karaf/jaas/modules/ldap/LDAPLoginModule.java	(revision 1098403)
+++ jaas/modules/src/main/java/org/apache/karaf/jaas/modules/ldap/LDAPLoginModule.java	(working copy)
@@ -224,6 +224,7 @@
             } else {
                 controls.setSearchScope(SearchControls.ONELEVEL_SCOPE);
             }
+            controls.setReturningAttributes(new String[]{roleNameAttribute});
             logger.debug("Looking for the user roles in LDAP with ");
             logger.debug("  base DN: " + roleBaseDN);
             roleFilter = roleFilter.replaceAll("%u", user);