Explanation of LDAP filters

I think this should go in for 1.6 too
nitpick, would be good to use backticks around the filters so it's clearer that the brackets are part of the value