differing behavior of ldapsearch