NEX-14547 Get UNIX group info. from AD/LDAP with partial RFC2307 schema
NEX-13132 smbd dumping core in nss_ldap.so.1`getbymember
Reviewed by: Matt Barden <matt.barden@nexenta.com>
Reviewed by: Evan Layton <evan.layton@nexenta.com>

@@ -1,13 +1,13 @@
 /*
  * Copyright 2001-2002 Sun Microsystems, Inc.  All rights reserved.
  * Use is subject to license terms.
+ *
+ * Copyright 2017 Nexenta Systems, Inc.  All rights reserved.
  */
 
-#pragma ident   "%Z%%M% %I%     %E% SMI"
 
-
 /*
  * The contents of this file are subject to the Netscape Public
  * License Version 1.1 (the "License"); you may not use this file
  * except in compliance with the License. You may obtain a copy of
  * the License at http://www.mozilla.org/NPL/

@@ -803,10 +803,20 @@
 
         escape = 0;
         for ( s = d = val; *s; s++ ) {
                 if ( escape ) {
                         /*
+                         * need to leave escaped comma as-is, i.e.
+                         * val="CN=Last\, First,OU=..."
+                         */
+                        if (*s == ',') {
+                                *d++ = '\\';
+                                *d++ = *s;
+                                escape = 0;
+                                continue;
+                        }
+                        /*
                          * first try LDAPv3 escape (hexadecimal) sequence
                          */
                         if (( ival = hexchar2int( *s )) < 0 ) {
                                 if ( firstdigit ) {
                                         /*