(ITS#5138) back-ldap still mis-handles search controls