JON is not retrieving LDAP groups (or throws javax.naming.directory.InvalidSearchFilterException) when Group Search Filter contains parentheses

Issue

• No groups are available in role definition page
• LDAP groups are not being retrieved
• potentially an exception is thrown:

org.rhq.enterprise.server.exception.LdapFilterException:The ldap group filter defined is invalid  invalid attribute description

and/or

[org.rhq.enterprise.server.resource.group.LdapGroupManagerBean] The ldap group filter defined is invalid
javax.naming.directory.InvalidSearchFilterException: invalid attribute description; remaining name 'dc=jbossuk,dc=redhat,dc=com'
        at com.sun.jndi.ldap.Filter.encodeSimpleFilter(Filter.java:446)
        at com.sun.jndi.ldap.Filter.encodeFilter(Filter.java:146)
        at com.sun.jndi.ldap.Filter.encodeFilterString(Filter.java:74)
        ...

• I see a red error box saying Failed to load LDAP groups available for role on the Role Definition Screen