Comment on Bitmask searches in LDAP, or How to exclude disabled users.. by fany

Also, thanks for this posting!
However, in order to make the search for enabled (= not disabled) users work, we hat to add aditional parenthesis: (!(useraccountcontrol:1.2.840.113556.1.4.803:=2)))
(Without it, we got “LDAPInvalidFilterError: malformed filter” resepectively “ldap_search_ext: Bad search filter (-7)” from different libraries.)