call ldap_escape_func for basedn, etc, too.