ldapsearch complains about DN having invalid syntax, but same DN works in JXplorer