ajout d'un commentaire sur l'échappement des caractères dans les filtres LDAP

lib/resetdb

@@ -112,6 +112,10 @@ EOF
 	fi
 
 	# remove the displayname constraint
+	# NOTE: left parenthesis must be escaped with \28
+	# right parenthesis with \29
+	# stars with \2a
+	# backslash with \5c
         if ldapsearch -H ldapi:// -Y EXTERNAL -b "$DN2" "olcConstraintAttribute=displayName,sn,givenName set \"\\28this/givenName + [ ] + this/sn\\29 & this/displayName\" restrict=\"ldap:///ou=people,$SUFFIX??sub?\\28objectClass=\\2a\\29\"" 2>/dev/null | grep -q ^olcConstraintAttribute ; then
 		cat <<EOF >$LDIF
 dn: $DN2