In version 0.9.7, the class LdapUrl isn't thread safe and concurrent requests could lead to this exception
Caused by: org.apache.directory.shared.ldap.codec.util.LdapURLEncodingException: Filter is invalid at org.apache.directory.shared.ldap.codec.util.LdapURL.parse(LdapURL.java:263) ~[shared-ldap-0.9.7.jar:?] at org.apache.directory.shared.ldap.codec.util.LdapURL.<init>(LdapURL.java:313) ~[shared-ldap-0.9.7.jar:?] at org.nuxeo.ecm.directory.ldap.LDAPReference.getSourceIdsForTarget(LDAPReference.java:581) ~[nuxeo-platform-directory-ldap-10.10-HF47.jar:?]
This problem is fixed in version 1.0.0-M1