Escaped chown arguments to allow users starting with a dash to follow Samba as much as possible
Conditional decode of utf8 so we don't decode it twice. Fixed Net::LDAP::Entry dn calls to decode it