title: active directory filter with objectGUID encoded as specified in rfc2254 doesn't work
body: <p>I'm using java ldap to access active directory, more specifically spring ldap.
  a group search by objectGUID yields no results when the filter is encoded as specified in rfc2254.</p>
  <p>this is the guid in its hex representation:</p>
  <pre><code>\49\00\f2\58\1e\93\69\4b\ba\5f\8b\86\54\e9\d8\e9
  </code></pre>
  <p>spring ldap encodes the filter like that:</p>
  <pre><code>(&amp;(objectClass=group)(objectGUID=\5c49\5c00\5cf2\5c58\5c1e\5c93\5c69\5c4b\5cba\5c5f\5c8b\5c86\5c54\5ce9\5cd8\5ce9))
  </code></pre>
  <p>as mentioned in <a href="https://www.rfc-editor.org/rfc/rfc2254#page-5" rel="nofollow noreferrer">rfc2254</a> and in microsoft <a href="http://social.technet.microsoft.com/wiki/contents/articles/5392.active-directory-ldap-syntax-filters.aspx#Special" rel="nofollow noreferrer">technet</a>:</p>
  <blockquote>
  <p>the character must be encoded as the backslash '' character (ASCII
  0x5c) followed by the two hexadecimal digits representing the ASCII
  value of the encoded character. The case of the two hexadecimal
  digits is not significant.
  Blockquote</p>
  </blockquote>
  <p>so a backslash should be '\5c'</p>
  <p>but I get no results with above filter from AD. also if I put that filter in AD management console custom filters it does not work.
  when I remove the 5c from the filter it works both from java and in AD console.</p>
  <p>Am I missing something here?</p>
  <p>of course I can encode the filter without the 5c but I'm nt sure it the right way and I prefer to let spring encode the filters because it knows a lot of things that I should do manually.</p>