LDAP Enrolments are lost when user is a member of a group that contains parenthesis in it's name. Enrolmenrs are reinstated running ldap_sync.php cli script

Enable and configure LDAP authentication Create and configure a test user in the LDAP server. Enable and configure LDAP enrolment with nested groups support. In your LDAP server create a group with parenthesis in the name. Let's call this group "GroupA". Add the test user to it. This group doesn't have to be created inside one of the contexts used for LDAP enrolments (though it can). Create a second LDAP group (with or without parenthesis in the name). Let's call this group "GroupB", and add the first group as a member to this one. Add only the first group, not the user itself. This second group must to be created inside one of the contexts used for LDAP enrolments. Create a third LDAP group without parenthesis in the name. Let's call this group "GroupC", and add the test user as a member of this group. This third group must to be created inside one of the contexts used for LDAP enrolments. Run the auth/ldap/cli/sync_users.php script (or log in interactively with that user, then log out) to make sure the user is created in Moodle if she didn't exist before. Either configure the LDAP enrolment plugin to auto-create courses, or make sure the courses corresponding to "GroupB" and "GroupC" already exist. Run the enrol/ldap/cli/sync.php script to create/update the user enrolments. Verify that the user is enroled in the two courses corresponding to groups "GroupB" and "GroupC". Without applying the patch, log in with the test user. It should have been unenroled from "GroupB" and "GroupC". Log out and apply the patch. Run the enrol/ldap/cli/sync.php script to create/update the user enrolments again. Verify that the user is re-enroled in the two courses corresponding to groups "GroupB" and "GroupC". Log in with the test user. It should still be enroled in "GroupB" and "GroupC".