Tasklist doesn't show group tasks or colleagues when using AD as an LDAP provider

Fixed LDAP identity provider to include correct escaping for user filtering and correct lookup of group users by distinguished name.  Previous code assumed that the user's DN contained the user id.  In active directory, this is not the case so it is safer to lookup the group user by their distinguished name as it appears in the group membership.

Related to CAM-2478