2 issues with ldap authentication: wrong ldapsearch and \ escape character doesn't work

I workaround this issue with xwiki.authentication.ldap.exclude_group setting instead