(ITS#5823) clients/tools don't honor ldap.conf defaults