(ITS#7492) add "onerr" to back-ldap