create LDAP filters