diff --git a/lib/resetdb b/lib/resetdb
index e8837b2..22e6cd9 100755
--- a/lib/resetdb
+++ b/lib/resetdb
@@ -112,6 +112,10 @@ EOF
 	fi
 
 	# remove the displayname constraint
+	# NOTE: left parenthesis must be escaped with \28
+	# right parenthesis with \29
+	# stars with \2a
+	# backslash with \5c
         if ldapsearch -H ldapi:// -Y EXTERNAL -b "$DN2" "olcConstraintAttribute=displayName,sn,givenName set \"\\28this/givenName + [ ] + this/sn\\29 & this/displayName\" restrict=\"ldap:///ou=people,$SUFFIX??sub?\\28objectClass=\\2a\\29\"" 2>/dev/null | grep -q ^olcConstraintAttribute ; then
 		cat <<EOF >$LDIF
 dn: $DN2