iamLogIf(ctx, err)
			} else if foundGroupDN == nil || !underBaseDN {
				err = errNoSuchGroup
			} else {
				entityName = foundGroupDN.NormDN
			}
		} else {
			var foundUserDN *xldap.DNSearchResult
			if foundUserDN, err = globalIAMSys.LDAPConfig.GetValidatedDNForUsername(entityName); err != nil {
				iamLogIf(ctx, err)

	// use the normalized form of the entityName (which will be an LDAP DN).
	userType := IAMUserType(mapping.UserType)
	isGroup := mapping.IsGroup
	entityName := mapping.UserOrGroup

	if globalIAMSys.GetUsersSysType() == LDAPUsersSysType && userType == stsUser {
		// Validate that the user or group exists in LDAP and use the normalized
		// form of the entityName (which will be an LDAP DN).
		var err error

protected String[] attributeUri; protected String[] attributeValue; protected int namespaceEnd; protected String[] namespacePrefix; protected int[] namespacePrefixHash; protected String[] namespaceUri; protected int entityEnd; protected String[] entityName; protected char[][] entityNameBuf; protected String[] entityReplacement; protected char[][] entityReplacementBuf; protected int[] entityNameHash; protected static final int READ_CHUNK_SIZE = 8192; protected java.io.Reader reader; protected String...