LDB/s4 - deny the "(dn=...)" syntax on search filters when in AD mode