regarding ldap filters "extensible match search"