Both LDAPUserGroupCallbackImpl and LDAPUserInfoImpl classes contain very long methods with many code duplicates which makes it really hard to understand how exactly they work. They need to be refactored and the logic dealing directly with LDAP should be extracted to another class.