fix for role lookup in domain-server