fixes #4298 - ldap auth should accept parens in firstname or surname

Support for special characters allowed by RFC2253 (except line breaks).  

30 chars also seemed small - e.g. Ahmadinejad (President of Iran) and viola, you're over the limit.