Weird filter behaviour with ldapsearch