Escape LDAP query special chars

[adorton-adobe]

Directory system OUs or group names may contain characters that are considered special characters in LDAP queries.

Special query characters are specified here:

http://www.rfc-editor.org/rfc/rfc4515.txt

I'm working with a customer that uses an asterisk (*) in the name of the OU that contains its user groups. The sync tool fails to query users belonging to groups that belong to that OU. The problem occurs when the sync tool gets the base DN of the group, and inserts it into the query that retrieves group members. The DN contains the OU. Escaping special characters in any string that gets inserted into an LDAP query will resolve the issue.