Dependency to Apache Directory shared-ldap should be removed. It is only used to construct the LDAP filter and to convert Calendar to generalized time syntax but causes lot of dependencies. I'd suggest to copy the required classes from shared-ldap. Maybe later, when switching from JNDI to Apache LDAP API the classes can be removed again.