NEX-14547 Get UNIX group info. from AD/LDAP with partial RFC2307 schema
NEX-13132 smbd dumping core in nss_ldap.so.1`getbymember
Reviewed by: Matt Barden <matt.barden@nexenta.com>
Reviewed by: Evan Layton <evan.layton@nexenta.com>

*** 1,13 ****
  /*
   * Copyright 2001-2002 Sun Microsystems, Inc.  All rights reserved.
   * Use is subject to license terms.
   */
  
- #pragma ident   "%Z%%M% %I%     %E% SMI"
  
- 
  /*
   * The contents of this file are subject to the Netscape Public
   * License Version 1.1 (the "License"); you may not use this file
   * except in compliance with the License. You may obtain a copy of
   * the License at http://www.mozilla.org/NPL/
--- 1,13 ----
  /*
   * Copyright 2001-2002 Sun Microsystems, Inc.  All rights reserved.
   * Use is subject to license terms.
+  *
+  * Copyright 2017 Nexenta Systems, Inc.  All rights reserved.
   */
  
  
  /*
   * The contents of this file are subject to the Netscape Public
   * License Version 1.1 (the "License"); you may not use this file
   * except in compliance with the License. You may obtain a copy of
   * the License at http://www.mozilla.org/NPL/
*** 803,812 ****
--- 803,822 ----
  
          escape = 0;
          for ( s = d = val; *s; s++ ) {
                  if ( escape ) {
                          /*
+                          * need to leave escaped comma as-is, i.e.
+                          * val="CN=Last\, First,OU=..."
+                          */
+                         if (*s == ',') {
+                                 *d++ = '\\';
+                                 *d++ = *s;
+                                 escape = 0;
+                                 continue;
+                         }
+                         /*
                           * first try LDAPv3 escape (hexadecimal) sequence
                           */
                          if (( ival = hexchar2int( *s )) < 0 ) {
                                  if ( firstdigit ) {
                                          /*