r7524: make the ldap ASN.1 filter parse code go via a struct